CVE-2024-42861

CVE-2024-42861 IEEE 802.1AS 표준gPTP 프로토콜에 대한 DoS 공격 CVE ID CVE-2024-42861 제품 IEEE 802.1AS 표준 버전 IEEE 802.1AS-2020, IEEE 802.1AS-2010 문제 DoS 공격 설명 IEEE 802.1AS가 활성화된 장치의 포트가 서로 다른 clockID를 가진 두 개의 PdelayReq 메시지를 수신하면 해당 포트의 시간 동기화 기능이 비활성화되어 서비스 거부DoS 공격으로 이어집니다. 공격자와 대상은 동일한 이더넷 네트워크에 있습니다. 공격자는 서...

Rocky Linux 8 [CIQ] Security Update: linuxptp / linuxptp-debuginfo / linuxptp-debugsource (crlsa-2021_4321)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214321 advisory. linuxptp: wrong length of one-step follow-up in transparent clock CVE-2021-3571 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8 [CIQ] Security Update: linuxptp / linuxptp-debuginfo / linuxptp-debugsource (crlsa-2021_2660)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20212660 advisory. linuxptp: missing length check of forwarded messages CVE-2021-3570 Tenable has extracted the preceding description block directly from the CIQ security advisory. No...

Astra Linux – Vulnerability in linuxptp

A flaw was discovered in the ptp4l program within the linuxptp package. A missing length check during the forwarding of PTP messages between ports allows a remote attacker to cause an information leak, system crash, or potentially remote code execution. The most significant threat posed by this...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: linuxptp (UTSA-2026-017411)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017411 advisory. A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: linuxptp (UTSA-2026-017433)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017433 advisory. A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause a...

MiracleLinux 8 : linuxptp-2.0-5.el8.1 (AXSA:2021-2195:03)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-2195:03 advisory. linuxptp: missing length check of forwarded messages CVE-2021-3570 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 8 : linuxptp-3.1.1-1.el8 (AXSA:2021-2668:04)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-2668:04 advisory. linuxptp: wrong length of one-step follow-up in transparent clock CVE-2021-3571 Tenable has extracted the preceding description block directly from the...

MiracleLinux 7 : linuxptp-2.0-2.el7.1 (AXSA:2021-2167:02)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-2167:02 advisory. linuxptp: missing length check of forwarded messages CVE-2021-3570 Tenable has extracted the preceding description block directly from the MiracleLinux...

TencentOS Server 3: linuxptp (TSSA-2022:0255)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0255 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

EUVD-2021-26881

Malware in sbrugna...

EUVD-2021-26880

Malware in sbrugna...

EUVD-2024-39814

Malicious code in bioql PyPI...

An issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial of service via a crafted Pdelay_Req message to the time synchronization function

...

A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. This flaw affects linuxptp versions before 3.1.1 and before 2.0.1.

...

Linux Distros Unpatched Vulnerability : CVE-2024-42861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial of service via a crafted PdelayReq message to the time...

Alibaba Cloud Linux 3 : 0050: linuxptp (ALINUX3-SA-2021:0050)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0050 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-3570: A flaw was found in the ptp4l progra...

linuxptp bug fix and enhancement update

An update is available for linuxptp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.1...

linuxptp bug fix update

An update is available for linuxptp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The linuxptp packages provide Precision Time Protocol PTP implementation for...

linuxptp bug fix and enhancement update

An update is available for linuxptp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.5...