Cisco IOS XE Software Crafted Network Time Protocol Packets Denial of Service Vulnerability

A vulnerability in the processing of Network Time Protocol NTP packets by Cisco IOS XE could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual denial of service DoS condition on the affected device. The vulnerability is due to insufficient checks on clearing th...

Updated openntpd/busybox packages fix security vulnerability

The busybox NTP implementation doesn't check the NTP mode of packets received on the server port and responds to any packet with the right size. This includes responses from another NTP server. An attacker can send a packet with a spoofed source address in order to create an infinite loop of...

MGASA-2016-0277 Updated openntpd/busybox packages fix security vulnerability

The busybox NTP implementation doesn't check the NTP mode of packets received on the server port and responds to any packet with the right size. This includes responses from another NTP server. An attacker can send a packet with a spoofed source address in order to create an infinite loop of...

CVE-2016-1478

Cisco IOS 15.53S3, 15.61S2, 15.62S1, and 15.62T1 does not properly dequeue invalid NTP packets, which allows remote attackers to cause a denial of service interface wedge by sending many crafted NTP packets, aka Bug ID CSCva35619...

Design/Logic Flaw

Cisco IOS 15.53S3, 15.61S2, 15.62S1, and 15.62T1 does not properly dequeue invalid NTP packets, which allows remote attackers to cause a denial of service interface wedge by sending many crafted NTP packets, aka Bug ID CSCva35619...

CVE-2016-1478

CVE-2016-1478 affects Cisco IOS and IOS XE: Cisco IOS versions 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 fail to properly dequeue/clear invalid NTP packets, enabling an unauthenticated remote attacker to cause an interface wedge and DoS by sending many crafted NTP packets. The issue stems fr...

Cisco IOS Software Crafted Network Time Protocol Packets Denial of Service Vulnerability (cisco-sa-20160804-wedge)

A vulnerability in the processing of Network Time Protocol NTP packets by Cisco IOS could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual denial of service DoS condition on the affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions...

RHEL 6 : ntp (RHSA-2016:1552)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1552 advisory. - ntp: off-path denial of service on authenticated broadcast mode CVE-2015-7979 - ntp: crypto-NAK preemptable association denial of service...

CVE-2016-6301

The recvandprocessclientpkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged NTP packet, which triggers a communication loop...

Amazon Linux AMI : ntp (ALAS-2016-727)

It was discovered that ntpq and ntpdc disclosed the origin timestamp to unauthenticated clients, which could permit such clients to forge the server's replies. CVE-2015-8139 The processpacket function in ntpproto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of...

Debian Security Advisory DSA 3629-1 (ntp - security update)

Several vulnerabilities were discovered in the Network Time Protocol daemon and utility programs: CVE-2015-7974 Matt Street discovered that insufficient key validation allows impersonation attacks between authenticated peers. CVE-2015-7977CVE-2015-7978Stephen Gray discovered that a NULL pointer...

Debian: Security Advisory (DSA-3629-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: ntp

Issue Overview: It was discovered that ntpq and ntpdc disclosed the origin timestamp to unauthenticated clients, which could permit such clients to forge the server's replies. CVE-2015-8139 The processpacket function in ntpproto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause...

Debian DSA-3629-1 : ntp - security update

Several vulnerabilities were discovered in the Network Time Protocol daemon and utility programs : - CVE-2015-7974 Matt Street discovered that insufficient key validation allows impersonation attacks between authenticated peers. - CVE-2015-7977 CVE-2015-7978 Stephen Gray discovered that a NULL...

[SECURITY] [DLA 559-1] ntp security update

Package : ntp Version : 1:4.2.6.p5+dfsg-2+deb7u7 CVE ID : CVE-2015-7974 CVE-2015-7977 CVE-2015-7978 CVE-2015-7979 CVE-2015-8138 CVE-2015-8158 CVE-2016-1547 CVE-2016-1548 CVE-2016-1550 CVE-2016-2516 CVE-2016-2518 Several vulnerabilities were discovered in the Network Time Protocol daemon and utili...

[SECURITY] [DSA 3629-1] ntp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3629-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 25, 2016 https://www.debian.org/security/faq -...

DLA-559-1 ntp - security update

Bulletin has no description...

GLSA-201607-15 : NTP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201607-15 NTP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in NTP. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly cause a Denial of Service...

Meinberg NTP Time Server ELX800/GPS M4x V5. 30p remote code execution and elevation of Privilege vulnerabilities

No description provided by source...

NTP: Multiple vulnerabilities

Background NTP contains software for the Network Time Protocol. Description Multiple vulnerabilities have been discovered in NTP. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly cause a Denial of Service condition. Workaround There is no kno...