CVE-2018-12327

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which nt...

CVE-2018-12327

The CVE-2018-12327 issue is a stack-based buffer overflow in ntpq and ntpdc of NTP v4.2.8p11 that can allow code execution or privilege escalation when given a long string as an IPv4/IPv6 command-line parameter. Public documentation from multiple vendors confirms the affected component (ntp ntpq/...

CVE-2018-12327

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which nt...

SUSE-SU-2018:1765-1 Security update for ntp

This update for ntp fixes the following issues: - Update to 4.2.8p11 bsc1082210: CVE-2016-1549: Sybil vulnerability: ephemeral association attack. While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11. CVE-2018-7182: ctlgetitem: buffer read overrun...

ntp 4.2.8p11 - Local Buffer Overflow (PoC) Vulnerability

Exploit for linux platform in category dos / poc Exploit Title: ntpq and ntpdc 4.2.8p11 Local Buffer Overflow Exploit Author: Fakhri Zulkifli @d0lph1n98 Vendor Homepage: http://www.ntp.org/ Software Link: http://www.ntp.org/downloads.html Version: 4.2.8p11 and earlier Tested on: 4.2.8p11 CVE :...

ntp 4.2.8p11 - Local Buffer Overflow (PoC)

ntp 4.2.8p11 - Local Buffer Overflow PoC Exploit Title: ntpq and ntpdc 4.2.8p11 Local Buffer Overflow Date: 2018-06-06 Exploit Author: Fakhri Zulkifli @d0lph1n98 Vendor Homepage: http://www.ntp.org/ Software Link: http://www.ntp.org/downloads.html Version: 4.2.8p11 and earlier Tested on: 4.2.8p11...

ntp 4.2.8p11 - Local Buffer Overflow (PoC)

Exploit Title: ntpq and ntpdc 4.2.8p11 Local Buffer Overflow Date: 2018-06-06 Exploit Author: Fakhri Zulkifli @d0lph1n98 Vendor Homepage: http://www.ntp.org/ Software Link: http://www.ntp.org/downloads.html Version: 4.2.8p11 and earlier Tested on: 4.2.8p11 CVE : CVE-2018-12327 Stack-based buffer...

Security Bulletin: Multiple vulnerabilities in ntp affect IBM Flex System Manager (FSM)

Summary Multiple vulnerabilities have been identified in ntp that is embedded in the FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2017-6464 DESCRIPTION: NTP is vulnerable to a denial of service. A remote authenticated attacker could exploit this vulnerabili...

Security Bulletin: Multiple vulnerabilities in ntp affect IBM Flex System Manager (FSM)

Summary Multiple vulnerabilities have been discovered in ntp that is embedded in FSM. This bulletin addresses these issues. Vulnerability Details CVEID: CVE-2015-5219 DESCRIPTION: Network Time Protocol NTP is vulnerable to a denial of service, caused by an error in the sntp program. By sending...

Security Bulletin: A security vulnerability has been identified in Red Hat® Enterprise Linux (RHEL) Server shipped with PurePower Integrated Manager (PPIM) (CVE-2017-6462 CVE-2017-6463 CVE-2017-6464)

Summary RHEL Server is shipped as a component of PPIM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2017-6462 DESCRIPTION: NTP is vulnerable to a denial of service, caused by a buffer overflow in the legacy Datum Programmable Time Server refclock driver. By...

Security Bulletin: Vulnerabilities in ntp affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the network time protocol daemon ntp. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-7426 DESCRIPTION: NTP is vulnerable to a denial of service, caused by the improper handling of invalid server responses. By...

Security Bulletin: Vulnerabilities in NTP affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Network Time Protocol NTP. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2015-5194 DESCRIPTION: Network Time Protocol NTP is vulnerable to a denial of service, caused by an uninitialized variable when processing...

Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple ntp vulnerabilities

Summary Multiple security vulnerabilities have been discovered in ntp that is embedded in the IBM FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2015-7705 DESCRIPTION: Network Time Protocol NTP is vulnerable to a denial of service, caused by an error in the...

Security Bulletin: Multiple vulnerabilities in ntp affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in the Network Time Protocol. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-5300 DESCRIPTION: Network Time Protocol NTP could allow a remote attacker to bypass security restrictions, caused by the failure to...

Security Bulletin: Multiple vulnerabilities in Network Time Protocol (NTP) affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in Network Time Protocol NTP. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2014-9297 DESCRIPTION: Network Time Protocol NTP Project NTP daemon ntpd could allow a remote attacker to conduct spoofing attacks, caused by...

Security Bulletin: IBM Pure Power Integrated Manager (PPIM) is affected by multiple ntp vulnerabilities

Summary Multiple security vulnerabilities have been discovered in ntp embedded in the IBM PPIM. This bulletin addresses these issues. Vulnerability Details CVEID: CVE-2015-8138 DESCRIPTION: NTP could allow a remote attacker to bypass security restrictions. By sending a specially crafted packet wi...

Security Bulletin: IBM Pure Power Integrated Manager (PPIM) is affected by vulnerabilities in ntp (CVE-2014-9750, CVE-2014-9751)

Summary Security vulnerabilities have been discovered in ntp embedded in the IBM PPIM. This bulletin addresses these issues. Vulnerability Details CVEID: CVE-2014-9750 DESCRIPTION: NTP NTPd could allow a remote attacker to obtain sensitive information, caused by an error in ntpcrypto.c when Autok...

Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple vulnerabilities in ntp

Summary Multiple security vulnerabilities have been discovered in ntp that is embedded in the IBM FSM. This bulletin addresses these issues. Vulnerability Details CVEID: CVE-2015-7691 DESCRIPTION: Network Time Protocol NTP is vulnerable to a denial of service, caused by an error in ntpcrypto.c. A...

Security Bulletin: Vulnerabilities in Network Time Protocol (NTP) affect IBM SONAS (CVE-2014-9293, CVE-2014-9294, CVE-2014-9295, and CVE-2014-9296)

Summary A fix is available for IBM SONAS, for the security vulnerabilities in Network Time Protocol NTP being used. Vulnerability Details Network Time Protocol NTP is used in IBM SONAS for synchronizing time. CVEID: CVE-2014-9293 DESCRIPTION: Network Time Protocol NTP Project NTP daemon ntpd coul...

Security Bulletin: IBM Virtualization Engine TS7700 - The NTP monlist command is enabled (CVE-2013-5211)

Summary The NTP daemon on the TS7700 has the 'monlist' command enabled. This command returns a list of recent hosts that have connected to the service.. Vulnerability Details CVEID: CVE-2013-5211 DESCRIPTION: NTP is vulnerable to a denial of service, caused by an error in the monlist feature in...