Lucene search

[email protected]NVD:CVE-2017-6464

HistoryMar 27, 2017 - 5:59 p.m.

CVE-2017-6464

2017-03-2717:59:00

CWE-20

[email protected]

web.nvd.nist.gov

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.089 Low

EPSS

Percentile

94.6%

JSON

NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.

Affected configurations

NVD

Node

ntpntpMatch4.2.8p9

ntpntpMatch4.3.0

ntpntpMatch4.3.1

ntpntpMatch4.3.2

ntpntpMatch4.3.3

ntpntpMatch4.3.4

ntpntpMatch4.3.5

ntpntpMatch4.3.6

ntpntpMatch4.3.7

ntpntpMatch4.3.8

ntpntpMatch4.3.9

ntpntpMatch4.3.10

ntpntpMatch4.3.11

ntpntpMatch4.3.12

ntpntpMatch4.3.13

ntpntpMatch4.3.14

ntpntpMatch4.3.15

ntpntpMatch4.3.16

ntpntpMatch4.3.17

ntpntpMatch4.3.18

ntpntpMatch4.3.19

ntpntpMatch4.3.20

ntpntpMatch4.3.21

ntpntpMatch4.3.22

ntpntpMatch4.3.23

ntpntpMatch4.3.24

ntpntpMatch4.3.25

ntpntpMatch4.3.26

ntpntpMatch4.3.27

ntpntpMatch4.3.28

ntpntpMatch4.3.29

ntpntpMatch4.3.30

ntpntpMatch4.3.31

ntpntpMatch4.3.32

ntpntpMatch4.3.33

ntpntpMatch4.3.34

ntpntpMatch4.3.35

ntpntpMatch4.3.36

ntpntpMatch4.3.37

ntpntpMatch4.3.38

ntpntpMatch4.3.39

ntpntpMatch4.3.40

ntpntpMatch4.3.41

ntpntpMatch4.3.42

ntpntpMatch4.3.43

ntpntpMatch4.3.44

ntpntpMatch4.3.45

ntpntpMatch4.3.46

ntpntpMatch4.3.47

ntpntpMatch4.3.48

ntpntpMatch4.3.49

ntpntpMatch4.3.50

ntpntpMatch4.3.51

ntpntpMatch4.3.52

ntpntpMatch4.3.53

ntpntpMatch4.3.54

ntpntpMatch4.3.55

ntpntpMatch4.3.56

ntpntpMatch4.3.57

ntpntpMatch4.3.58

ntpntpMatch4.3.59

ntpntpMatch4.3.60

ntpntpMatch4.3.61

ntpntpMatch4.3.62

ntpntpMatch4.3.63

ntpntpMatch4.3.64

ntpntpMatch4.3.65

ntpntpMatch4.3.66

ntpntpMatch4.3.67

ntpntpMatch4.3.68

ntpntpMatch4.3.69

ntpntpMatch4.3.70

ntpntpMatch4.3.71

ntpntpMatch4.3.72

ntpntpMatch4.3.73

ntpntpMatch4.3.74

ntpntpMatch4.3.75

ntpntpMatch4.3.76

ntpntpMatch4.3.77

ntpntpMatch4.3.78

ntpntpMatch4.3.79

ntpntpMatch4.3.80

ntpntpMatch4.3.81

ntpntpMatch4.3.82

ntpntpMatch4.3.83

ntpntpMatch4.3.84

ntpntpMatch4.3.85

ntpntpMatch4.3.86

ntpntpMatch4.3.87

ntpntpMatch4.3.88

ntpntpMatch4.3.89

ntpntpMatch4.3.90

ntpntpMatch4.3.91

ntpntpMatch4.3.92

ntpntpMatch4.3.93

References

support.ntp.org/bin/view/Main/NtpBug3389

support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu

www.securityfocus.com/bid/97050

www.securitytracker.com/id/1038123

access.redhat.com/errata/RHSA-2017:3071

access.redhat.com/errata/RHSA-2018:0855

security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc

support.apple.com/HT208144

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.089 Low

EPSS

Percentile

94.6%

JSON

CVE-2017-6464

Affected configurations

References

Related