Security Bulletin: Multiple vulnerabilities in NTP, OpenSSL and GNU glibc affect IBM Netezza Host Management

Summary NTP, OpenSSL, GNU glibc and Libreswan are used by IBM Netezza Host Management. IBM Netezza Host Management has addressed the applicable CVEs Vulnerability Details CVEID: CVE-2015-1799 DESCRIPTION: Network Time Protocol NTP Project NTP daemon ntpd is vulnerable to a denial of service, caus...

Security Bulletin: Multiple vulnerabilities in NTP and OpenSSL affect IBM Netezza Firmware Diagnostics

Summary Open Source NTP and OpenSSL are used by IBM Netezza Firmware Diagnostics. IBM Netezza Firmware Diagnostics Support Tools has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2183 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused...

Security Bulletin: Multiple vulnerabilities in Open Source NTP and ISC BIND affect IBM Netezza Host Management

Summary Open Source NTP and ISC BIND are used by IBM Netezza Host Management. IBM Netezza Host Management has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-9310 DESCRIPTION: NTP is vulnerable to a denial of service, caused by an error in the control mode mode 6 functionalit...

Security Bulletin: Multiple Vulnerabilities in NTP and OpenSSL affect IBM Netezza Firmware Diagnostics Tools

Summary NTP and OpenSSL is used by IBM Netezza Firmware Diagnostics Tools. OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. IBM Netezza Firmware Diagnostics Tools has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-8138 DESCRIPTION: NTP could allo...

NewStart CGSL CORE 5.04 / MAIN 5.04 : ntp Vulnerability (NS-SA-2019-0206)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has ntp packages installed that are affected by a vulnerability: - Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long...

CVE-2018-12327

The ntpq and ntpdc command-line utilities that are part of ntp package are vulnerable to stack-based buffer overflow via crafted hostname. Applications using these vulnerable utilities with an untrusted input may be potentially exploited, resulting in a crash or arbitrary code execution under...

The vulnerability of the fly-admin-date component in the FLY operating system environment of Astra Linux, due to insufficient input data validation, allows a hacker to trigger a service failure.

The vulnerability of the fly-admin-date component in the FLY environment of the Astra Linux operating system is related to a calendar synchronization error due to ntp. Exploiting this vulnerability allows a remote attacker to cause service failures...

EulerOS 2.0 SP3 : ntp (EulerOS-SA-2019-2066)

According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number o...

Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager Appliance.

Summary Multiple security vulnerabilities have been identified and fixed in the IBM Security Privileged Identity Manager Appliance. Vulnerability Details CVEID: CVE-2018-1049 DESCRIPTION: Systemd is vulnerable to a denial of service, caused by a race condition between .mount and .automount units....

EulerOS 2.0 SP2 : ntp (EulerOS-SA-2019-1860)

According to the version of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - NTP through 4.2.8p12 has a NULL Pointer Dereference.CVE-2019-8936 Note that Tenable Network Security has extracted the preceding description block...

EulerOS Virtualization for ARM 64 3.0.2.0 : ntp (EulerOS-SA-2019-1938)

According to the versions of the ntp packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package...

EulerOS 2.0 SP5 : ntp (EulerOS-SA-2019-1878)

According to the version of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - NTP through 4.2.8p12 has a NULL Pointer Dereference.CVE-2019-8936 Note that Tenable Network Security has extracted the preceding description block...

ntp:fuzz_ntpd_receive: Use-of-uninitialized-value in receive

Detailed Report: https://oss-fuzz.com/testcase?key=5684730627883008 Project: ntp Fuzzing Engine: libFuzzer Fuzz Target: fuzzntpdreceive Job Type: libfuzzermsanntp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: receive fuzzntpdreceive.c fuzzntpdreceive.c...

ntp:fuzz_ntpd_receive: Use-of-uninitialized-value in process_control

Detailed Report: https://oss-fuzz.com/testcase?key=5649397106343936 Project: ntp Fuzzing Engine: libFuzzer Fuzz Target: fuzzntpdreceive Job Type: libfuzzermsanntp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: processcontrol receive fuzzntpdreceive.c...

CVE-2019-1967

A vulnerability in the Network Time Protocol NTP feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to excessive use of system resources when the affected device is logging a dr...

Design/Logic Flaw

A vulnerability in the Network Time Protocol NTP feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to excessive use of system resources when the affected device is logging a dr...

CentOS 7 : ntp (CESA-2019:2077)

An update for ntp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

CVE-2019-1967 Cisco NX-OS Software Network Time Protocol Denial of Service Vulnerability

A vulnerability in the Network Time Protocol NTP feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to excessive use of system resources when the affected device is logging a dr...

CVE-2019-1967

Cisco NX-OS Software is affected by CVE-2019-1967 due to excessive resource usage when logging drops for Mode 7 NTP packets, enabling a remote attacker to cause high CPU/memory usage and possible reboots via a flood of Mode 7 NTP traffic. The issue impacts the NTP feature (enabled by default). Re...

CVE-2019-1967 Cisco NX-OS Software Network Time Protocol Denial of Service Vulnerability

A vulnerability in the Network Time Protocol NTP feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to excessive use of system resources when the affected device is logging a dr...