Lucene search
F5F5:K15935HistorySep 17, 2015 - 12:00 a.m.
K15935 : NTP vulnerability CVE-2014-9294
2015-09-1700:00:00
my.f5.com
17
5.7 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.044 Low
EPSS
Percentile
91.6%
Security Advisory Description
util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
(
CVE-2014-9294
)
Impact
Theoretically, a remote attacker can determine a weak key and manipulate NTP packets. However, no public exploits are known at this time.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.3.0 | |
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 12.0.0 | |
| big-ip analytics | eq | 11.0.0 |
Related
nessus
nessus
F5 Networks BIG-IP : NTP vulnerability (SOL15935)
2016-07-19 00:00:00
AIX 7.1 TL 3 : ntp (IV68430)
2015-02-11 00:00:00
AIX 6.1 TL 9 : ntp (IV68428)
2015-02-11 00:00:00
prion
prion
Design/Logic Flaw
2014-12-20 02:59:00
f5
f5
SOL15935 - NTP vulnerability CVE-2014-9294
2014-12-23 00:00:00
ubuntucve
ubuntucve
CVE-2014-9294
2014-12-19 00:00:00
openvas
openvas
NTP.org 'ntpd' Predictable Random Number Generator Weakness Brute Force Attack Vulnerability
2017-01-16 00:00:00
Oracle: Security Advisory (ELSA-2014-2025)
2015-10-06 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0259-1)
2021-06-09 00:00:00
debiancve
debiancve
CVE-2014-9294
2014-12-20 02:59:00
cve
cve
CVE-2014-9294
2014-12-20 02:59:00
redhat
redhat
(RHSA-2014:2025) Important: ntp security update
2014-12-20 00:00:00
(RHSA-2014:2024) Important: ntp security update
2014-12-20 00:00:00
(RHSA-2015:0104) Important: ntp security update
2015-01-28 00:00:00
centos
centos
ntp security update
2014-12-20 03:00:03
ntp, ntpdate, sntp security update
2014-12-20 02:57:22
aix
aix
oraclelinux
oraclelinux
ntp security update
2014-12-20 00:00:00
ntp security update
2014-12-20 00:00:00
ics
ics
Network Time Protocol Vulnerabilities (Supplement Update A)
2015-03-05 12:00:00
Network Time Protocol Vulnerabilities (Update B)
2018-09-10 12:00:00
Network Time Protocol Vulnerabilities (Update C)
2018-08-29 12:00:00
citrix
citrix
Citrix Security Advisory for NTP Vulnerabilities
2015-01-05 04:00:00
ibm
ibm
suse
suse
Security update for ntp (important)
2015-02-16 19:05:42
Security update for ntp (important)
2015-02-12 03:06:04
Security update for ntp (important)
2015-02-12 21:04:54
slackware
slackware
[slackware-security] ntp
2014-12-23 05:38:39
arista
arista
Security Advisory 0008
2015-01-09 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3108-1] ntp security update
2014-12-23 00:00:00
Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products
2014-12-25 00:00:00
FreeBSD Security Advisory FreeBSD-SA-14:31.ntp
2014-12-25 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: ntp-4.2.6p5-25.fc21
2014-12-23 18:28:40
[SECURITY] Fedora 19 Update: ntp-4.2.6p5-13.fc19
2014-12-31 19:00:28
[SECURITY] Fedora 20 Update: ntp-4.2.6p5-19.fc20
2014-12-22 02:37:36
osv
osv
ntp - security update
2014-12-20 00:00:00
ntp - security update
2014-12-20 00:00:00
mageia
mageia
Updated ntp packages fix security vulnerabilities
2014-12-20 16:51:12
gentoo
gentoo
NTP: Multiple vulnerabilities
2014-12-24 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:31.ntp
2014-12-23 00:00:00
ubuntu
ubuntu
NTP vulnerabilities
2014-12-22 00:00:00
checkpoint_security
checkpoint_security
debian
debian
[SECURITY] [DSA 3108-1] ntp security update
2014-12-20 20:37:23
[SECURITY] [DLA 116-1] ntp security update
2014-12-20 21:21:02
veracode
veracode
Authentication Bypass
2019-05-02 05:06:19
Weak Authentication
2019-05-02 05:06:18
Arbitrary Code Execution
2019-05-02 05:06:18
amazon
amazon
Important: ntp
2014-12-19 14:00:00
archlinux
archlinux
ntp: multiple issues
2014-12-22 00:00:00
freebsd
freebsd
ntp -- multiple vulnerabilities
2014-12-19 00:00:00
cert
cert
cisco
cisco
Multiple Vulnerabilities in ntpd Affecting Cisco Products
2014-12-22 16:00:00
oracle
oracle
Oracle Critical Patch Update - October 2016
2016-10-18 00:00:00
5.7 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.044 Low
EPSS
Percentile
91.6%
Related for F5:K15935