3530 matches found
CVE-2017-6451
CVE-2017-6451 affects the NTP legacy MX4200 refclock. The mx4200_send function mishandles the return value of snprintf, enabling a local attacker to trigger an out-of-bounds write and potentially execute arbitrary code. Affected: NTP before 4.2.8p10 and 4.3.x before 4.3.94. Mitigation/remediation...
CVE-2017-6455
CVE-2017-6455 affects NTP versions prior to 4.2.8p10 and 4.3.x prior to 4.3.94 when using PPSAPI. Local users can gain privileges by placing a DLL in the PPSAPI_DLLS environment variable, enabling a local privilege escalation. Public references in the connected documents confirm the vulnerability...
CVE-2017-6462
Buffer overflow in the legacy Datum Programmable Time Server DPTS refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device...
CVE-2017-6459
The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes...
CVE-2017-6458
CVE-2017-6458 affects NTP where multiple buffer overflows in the ctl_put* functions exist in versions before 4.2.8p10 and 4.3.x before 4.3.94. An authenticated remote attacker could exploit these issues to crash the ntpd process or cause unspecified impact via a long variable. The available sourc...
CVE-2017-6462
CVE-2017-6462 affects ntp (ntpd) via a buffer overflow in the legacy Datum Programmable Time Server refclock driver (/dev/datum). The issue allows a local attacker to exploit crafted /dev/datum input to overflow a buffer and cause a denial of service or unspecified impact. Public sources corrobor...
CVE-2017-6458
Multiple buffer overflows in the ctlput functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable...
CVE-2017-6451
The mx4200send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write...
CVE-2017-6452
Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line...
CVE-2017-6463
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service daemon crash via an invalid setting in a :config directive, related to the unpeer option...
CVE-2017-6452
CVE-2017-6452 is a Windows NT P (NTP) installer issue described in the initial record as a stack-based buffer overflow via an application path on the command line in NTP before 4.2.8p10 and 4.3.x before 4.3.94. Connected document BSA-2017-292 confirms the vulnerability class and specifies affecte...
CVE-2017-6459
CVE-2017-6459 affects the Windows installer for ntp prior to 4.2.8p10 and ntp 4.3.x prior to 4.3.94. The vulnerability allows local users to cause unspecified impact via vectors related to an argument with multiple null bytes. Public references confirm the ntp update path: 4.2.8p10 and 4.3.94 con...
CVE-2017-6455
NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPIDLLS environment variable...
CVE-2017-6459
The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes...
CVE-2017-6458
Multiple buffer overflows in the ctlput functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable...
CVE-2017-6463
CVE-2017-6463 affects ntp ntpd; remote authenticated users can crash the daemon by sending an invalid :config directive setting (unpeer option). It exists in ntp releases before 4.2.8p10 and 4.3.x before 4.3.94. Impact is a denial of service via daemon crash. Remediation from the public advisory ...
CVE-2017-6451
The mx4200send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write...
CVE-2017-6460
Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response...