Security Bulletin: Vulnerabilities in NTP, OpenSSL and Intel CPU's affect IBM Netezza Firmware Diagnostics.

Summary Public disclosed vulnerability from Network Time Protocol NTP, Public disclosed vulnerability from OpenSSL and Intel CPU's are used by IBM Netezza Firmware Diagnostics. IBM Netezza Firmware Diagnostics Support Tools has addressed the applicable CVEs. Vulnerability Details CVEID:...

The vulnerability of the Network Time Protocol implementation in the Cisco NX-OS operating system allows a intruder to trigger a service failure.

The vulnerability of the Network Time Protocol implementation in the Cisco NX-OS operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

EulerOS Virtualization for ARM 64 3.0.2.0 : ntp (EulerOS-SA-2019-1938)

According to the versions of the ntp packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package...

CVE-2019-1967

A vulnerability in the Network Time Protocol NTP feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to excessive use of system resources when the affected device is logging a dr...

Design/Logic Flaw

A vulnerability in the Network Time Protocol NTP feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to excessive use of system resources when the affected device is logging a dr...

ntp, ntpdate, sntp security update

CentOS Errata and Security Advisory CESA-2019:2077 An update for ntp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

CentOS 7 : ntp (CESA-2019:2077)

An update for ntp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

CVE-2019-1967 Cisco NX-OS Software Network Time Protocol Denial of Service Vulnerability

A vulnerability in the Network Time Protocol NTP feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to excessive use of system resources when the affected device is logging a dr...

CVE-2019-1967

Cisco NX-OS Software is affected by CVE-2019-1967 due to excessive resource usage when logging drops for Mode 7 NTP packets, enabling a remote attacker to cause high CPU/memory usage and possible reboots via a flood of Mode 7 NTP traffic. The issue impacts the NTP feature (enabled by default). Re...

Cisco NX-OS Software Resource Management Error Vulnerability

Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. A resource management error vulnerability exists in the Network Time Protocol NTP feature of Cisco NX-OS Software, which can be exploited by remote attackers to cause a...

Cisco NX-OS Software Network Time Protocol Denial of Service Vulnerability

A vulnerability in the Network Time Protocol NTP feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to excessive use of system resources when the affected device is logging a dr...

Low: Red Hat Security Advisory: ntp security, bug fix, and enhancement update

An update for ntp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

Operating System (OS) Detection (NTP)

Network Time Protocol NTP server based Operating System OS detection. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2020-8985 · Ntp +4 · Ntp +4

Name of the Vulnerable Software and Affected Versions: ntp versions 4.2.8p10 through 4.2.8p13 Description: The issue allows remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a...

DEBIAN-CVE-2019-8936

NTP through 4.2.8p12 has a NULL Pointer Dereference...

UBUNTU-CVE-2019-8936

NTP through 4.2.8p12 has a NULL Pointer Dereference...

Fedora Update for ntp FEDORA-2019-f781d5c4c6

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Denial Of Service (DoS)

Network Time Protocol NTP is vulnerable to denial of service DOS attacks. This occurs in the NTP server's parsing of configuration directives. A remote, authenticated attacker could cause ntpd to crash by sending a crafted message...

Man-In-The-Middle (MitM)

The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by...

Insufficient Entropy In Key Generation Algorithm

The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by...