Lucene search

K
f5F5F5:K16393
HistoryNov 07, 2015 - 12:00 a.m.

K16393 : NTP vulnerability CVE-2014-9751

2015-11-0700:00:00
my.f5.com
16

5.7 Medium

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.5%

Security Advisory Description

Some kernels do not offer protection for ::1 source addresses on IPv6 interfaces. Since NTP’s access control mechanism is based on source address and localhost addresses generally have no restrictions, an attacker may be able to send malicious control and configuration packets by spoofing ::1 addresses from the outside. (CVE-2014-9751)
Note: The candidate number originally referenced in this article, CVE-2014-9298, was rejected because it was associated with two different issues.
Impact
This vulnerability may allow an attacker to bypass NTP access control mechanisms that rely on IPv6 source address filtering.