Critical Photon OS Security Update - PHSA-2023-4.0-0417

Updates of 'bindutils', 'libXi', 'protobuf', 'samba-client', 'libarchive', 'kube-bench', 'docker-compose', 'libtiff', 'binutils-aarch64-linux-gnu', 'nodejs', 'binutils', 'ntp' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2023-5.0-0040

Updates of 'ntp', 'glibc' packages of Photon OS have been released...

Key Network Questions

I wrote this on 7 December 2018 but never published it until today. The following are the "key network questions" which "would answer many key questions about a network, without having to access a third party log repository. This data is derived from mining Zeek log data as it is created, rather...

SUSE SLES15 / openSUSE 15 Security Update : ntp (SUSE-SU-2023:2608-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2608-1 advisory. - CVE-2023-26555: Fixed assertion failure on malformed RT-11 dates bsc1210390. Tenable has extracted the preceding description...

SUSE SLES12 Security Update : ntp (SUSE-SU-2023:2609-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2609-1 advisory. ntp was updated to 4.2.8p17: Fix some regressions of 4.2.8p16 Update to 4.2.8p16: Sec 3808 Assertion failure in ntpq on malformed RT-11 date...

SUSE-SU-2023:2609-1 Security update for ntp

This update for ntp fixes the following issues: ntp was updated to 4.2.8p17: Fix some regressions of 4.2.8p16 Update to 4.2.8p16: Sec 3808 Assertion failure in ntpq on malformed RT-11 date Sec 3807, bsc1210390, CVE-2023-26555: praecisparse in the Palisade refclock driver has a hypothetical input...

SUSE-SU-2023:2608-1 Security update for ntp

This update for ntp fixes the following issues: - CVE-2023-26555: Fixed assertion failure on malformed RT-11 dates bsc1210390...

SUSE: Security Advisory (SUSE-SU-2023:2609-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical Photon OS Security Update - PHSA-2023-5.0-0031

Updates of 'ntp' packages of Photon OS have been released...

Fedora: Security Advisory for ntp-refclock (FEDORA-2023-611a143d5f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-3036

An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71 enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packe...

Code injection

An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71 enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packe...

CVE-2023-3036

CVE-2023-3036 affects github.com/cloudflare/cfnts prior to commit 783490b. The issue is an unchecked read in the NTP server implementation, enabling a remote attacker to trigger a panic by sending an NTSAuthenticator packet with an extension length longer than the packet contents. Affected: cfnts...

CVE-2023-3036 Out of Bounds Slice index in cfnts leads to remote panic

An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71 enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packe...

CVE-2023-3036 Out of Bounds Slice index in cfnts leads to remote panic

An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71 enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packe...

[SECURITY] Fedora 38 Update: ntp-refclock-0.6-1.fc38

ntp-refclock is a wrapper for reference clock drivers included in the ntpd daemon, which enables other NTP implementations to use the supported hardware reference clocks for synchronization of the system clock. It provides a minimal environment for the drivers to be able to run in a separate...

[SECURITY] Fedora 37 Update: ntp-refclock-0.6-1.fc37

ntp-refclock is a wrapper for reference clock drivers included in the ntpd daemon, which enables other NTP implementations to use the supported hardware reference clocks for synchronization of the system clock. It provides a minimal environment for the drivers to be able to run in a separate...

Fedora 37 : ntp-refclock (2023-c0762a0e57)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c0762a0e57 advisory. Update to latest ntp-refclock and ntp, which fixes CVE-2023-26555. Tenable has extracted the preceding description block directly from the Fedora...

Fedora: Security Advisory for ntp-refclock (FEDORA-2023-c0762a0e57)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : ntp-refclock (2023-611a143d5f)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-611a143d5f advisory. Update to latest ntp-refclock and ntp, which fixes CVE-2023-26555. Tenable has extracted the preceding description block directly from the Fedora...