3526 matches found
CVE-2020-15025
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service memory consumption by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file...
CVE-2020-15025
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service memory consumption by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file...
Design/Logic Flaw
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service memory consumption by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file...
CVE-2020-15025
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service memory consumption by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file...
CVE-2020-15025
The CVE-2020-15025 entry concerns ntpd (NTP) memory exhaustion via CMAC-related paths. Affected: ntpd 4.2.8 prior to 4.2.8p15 and 4.3.x prior to 4.3.101. Root cause: memory is not freed in CMAC-key scenarios in ntp.keys, enabling remote packets to trigger a denial of service through memory consum...
CVE-2020-15025
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service memory consumption by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file...
CVE-2004-0657
Integer overflow in the NTP daemon NTPd before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time...
Denial Of Service (DoS)
ntp is vulnerable to denial of service DoS. The vulnerability exists as it is using highly predictable transmit timestamps could result in time change or DoS...
Denial Of Service (DoS)
ntp is vulnerable to denial of service DoS. The vulnerability exists on the client ntpd using server mode packet...
ntp security update
4.2.6p5-29.0.1 - Bump release to avoid ULN conflict with Oracle modified errata. 4.2.6p5-29.el78.2 - don't update transmission time on invalid response CVE-2020-11868 - randomize transmit timestamp in client requests CVE-?, 1813787...
Scientific Linux Security Update : ntp on SL7.x x86_64 (20200623)
Security Fixes : - ntp: ntpd using highly predictable transmit timestamps could result in time change or DoS CVE-2020-13817 - ntp: DoS on client ntpd using server mode packet CVE-2020-11868 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if...
CentOS: Security Advisory for ntp (CESA-2020:2663)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CentOS 7 : ntp (RHSA-2020:2663)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2663 advisory. - ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet wi...
Slackware 14.0 / 14.1 / 14.2 / current : ntp (SSA:2020-175-01)
New ntp packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-175-01. The text itself is copyright C Slackware Linux,...
[slackware-security] ntp
New ntp packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/ntp-4.2.8p15-i586-1slack14.2.txz: Upgraded. This release fixes one vulnerability: Associations that use CMAC authentication...
Moderate: Red Hat Security Advisory: ntp security update
An update for ntp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...
FortiAnalyzer could potentially be used in NTP amplification attacks
An insufficient control of network message volume CWE-406 vulnerability in FortiAnalyzer may allow an unauthenticated remote attacker to perform NTP amplification attacks thereby causing reflected denial of service on arbitrary targets via sending specially crafted mode 6 queries to the...
Cayin CMS NTP Server 11.0 CVE-2020-7357 - Remote Code Execution
This Metasploit module exploits an authenticated remote code execution vulnerability in Cayin CMS versions 11.0 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cayin CMS NTP Server RCE',...
Cayin CMS NTP Server 11.0 Remote Code Execution Exploit
This Metasploit module exploits an authenticated remote code execution vulnerability in Cayin CMS versions 11.0 and below. The code execution is executed in the systemservice.cgi file's ntpIp Parameter. The field is limited in size, so repeated requests are made to achieve a larger payload. Cayin...
Cayin CMS NTP Server 11.0 Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cayin CMS NTP Server RCE', 'Description' = %q This module exploits an authenticated RCE in Cayin CMS MSFLICENSE, 'Author' = 'h00die', msf module...