614 matches found
UBUNTU-CVE-2016-9311
ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted packet...
CVE-2016-1549
A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim's clock...
CVE-2016-1548
An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimat...
CVE-2016-1548
An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimat...
CVE-2016-1549
A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim's clock...
CVE-2016-1549
CVE-2016-1549 affects ntpd; a malicious authenticated peer can create arbitrarily-many ephemeral associations to win the clock selection and modify a victim’s clock. Affected versions: ntpd 4.2.8p4 and earlier. Remediation: upgrade ntp/ntpd to a fixed release (upstream fix vs. later advisories in...
NTP.org 'ntpd' Multiple Vulnerabilities
NTP.org SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntp:ntp"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.809858";...
CVE-2016-9312
ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of service via a large UDP packet...
GLSA-201701-05 : BusyBox: Denial of Service
The remote host is affected by the vulnerability described in GLSA-201701-05 BusyBox: Denial of Service The recvandprocessclientpkt function in networking/ntpd.c in BusyBox allows remote attackers to cause a Denial of Service CPU and bandwidth consumption via a forged NTP packet, which triggers a...
UBUNTU-CVE-2016-9042
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin...
F5 Networks BIG-IP : NTP vulnerability (K82644737)
The processpacket function in ntpproto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service peer-variable modification by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication...
NTPD denial of service vulnerability, CVE-2016-7434 analysis-vulnerability warning-the black bar safety net
Author: LJ, dawu know Chong Yu 404 laboratory Preface NTP service for the Internet is essential, many things can and it linked together. Not so long ago, the sensational Germany off the network the event also appeared in its shadow. Ensure the NTP server's security is very important! 0x00...
CVE-2016-6301
The recvandprocessclientpkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged NTP packet, which triggers a communication loop...
Updated ntp packages fix security vulnerabilities
When ntpd is configured with rate limiting for all associations restrict default limited in ntp.conf, the limits are applied also to responses received from its configured sources. An attacker who knows the sources e.g., from an IPv4 refid in server response and knows the system is misconfigured ...
Doing things the NTP----CVE-2016-7434 vulnerability analysis-vulnerability warning-the black bar safety net
The NTP Protocol Analysis with CVE-2016-7434 About the client and the NTP server, the NTP Protocol interaction, the synchronous time of process I is no longer described in detail, with a pair of figure can be a brief description of the time synchronization process, in this process, the data take...
NTP.org 'ntpd' 'decodenetnum' And 'loop counter underrun' DoS Vulnerabilities
NTP.org SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntp:ntp"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.810221";...
Linux ntpd 4.2.8 derive_nonce Stack Overflow Exploit
Linux ntpd 4.2.8 derivenonce remote stack overflow proof of concept exploit. !/usr/bin/perl Linux ntpd 4.2.8 'derivenonce' remote stack overflow PoC Copyright 2016 c Todor Donev email protected https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg...
Linux ntpd 4.2.8 derive_nonce Stack Overflow
!/usr/bin/perl Linux ntpd 4.2.8 'derivenonce' remote stack overflow PoC Copyright 2016 c Todor Donev [email protected] https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg http://pastebin.com/u/hackerscommunity Description: The ntpd program is an operating-system daemon...
CVE-2016-9311
A flaw was found in the way ntpd implemented the trap service. A remote attacker could send a specially crafted packet to cause a null pointer dereference that will crash ntpd, resulting in a denial of service. Mitigation Use "restrict default noquery ..." in your ntp.conf file. Only allow mode 6...
NTP Daemon _IO_str_init_static_internal Denial of Service (CVE-2016-7434)
A denial of service vulnerability exists in the Network Time Protocol daemon NTPD. The vulnerability is due to a null pointer dereference in the IOstrinitstaticinternal function. A remote attacker can exploit this vulnerability by sending a crafted packet to the target service. Successful...