[SECURITY] [DSA 3154-2] ntp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3154-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 07, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3154-2] ntp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3154-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 07, 2015 http://www.debian.org/security/faq -...

DLA-149-1 ntp - security update

Bulletin has no description...

DSA-3154-2 ntp - incomplete fix

Bulletin has no description...

[SECURITY] [DSA 3154-1] ntp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3154-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 05, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3154-1] ntp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3154-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 05, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3154-1 (ntp - security update)

Several vulnerabilities were discovered in the ntp package, an implementation of the Network Time Protocol. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-9297 Stephen Roettger of the Google Security Team, Sebastian Krahmer of the SUSE Security Team a...

DSA-3154-1 ntp - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3154-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ntp: ntp-keygen uses weak random number generator and seed when generating MD5 keys

It was found that ntp-keygen used a weak method for generating MD5 keys. This could possibly allow an attacker to guess generated MD5 keys that could then be used to spoof an NTP client or server. Note: it is recommended to regenerate any MD5 keys that had explicitly been generated with ntp-keyge...

ntp: Multiple buffer overflows via specially-crafted packets

Multiple buffer overflow flaws were discovered in ntpd's cryptorecv, ctlputdata, and configure functions. A remote attacker could use either of these flaws to send a specially crafted request packet that could crash ntpd or, potentially, execute arbitrary code with the privileges of the ntp user...

ntp: receive() missing return on error

A missing return statement in the receive function could potentially allow a remote attacker to bypass NTP's authentication mechanism...

NTP Daemon Configure Buffer Overflow (CVE-2014-9295)

The NTP daemon implements the Network Time Protocol NTP which sets and maintains the system time-of-day in synchronism with Internet standard time servers. A buffer overflow vulnerability has been reported in the NTPD NTP daemon. The vulnerability is due to insufficient checks on the input size. ...

Security Advisory 0008

Security Advisory 0008 PDF Date: January 9th 2015 Revision| Date| Changes ---|---|--- 1.0 | January 9th 2015 | Initial release Arista 7000 Series Products and Arista EOS are not vulnerable to NTP CVE-2014-9293, CVE-2014-9294, CVE-2014-9295, and CVE-2014-9296. In December 2014, the Network Time...

Excavations and the use of ntpd vulnerability-vulnerability warning-the black bar safety net

0x01 description A few months ago, I decided to start doing fuzzing it. I chose the Network Time Protocol the Network Time Protocol, NTP is the reference implementation of ntpd as my first target, because I have NTP some of the background knowledge, while this Protocol seems very simple, can be...

[SECURITY] Fedora 19 Update: ntp-4.2.6p5-13.fc19

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

For patch NTP-Network Time Protocol vulnerabilities, Apple released the first Auto-Update Patch-vulnerability warning-the black bar safety net

Last night, Apple released its first automated patch, used to repair Appleoperating systemon the keyNetwork Time Protocol（NTP）vulnerabilitiesthe. The patch can be automatically patched, and does not require the user to restart the operation. NTP Network TimeProtocol, the Network Time Protocol, is...

PT-2015-6798 · Ntt +4 · Ntp +4

Name of the Vulnerable Software and Affected Versions: NTP versions prior to 4.2.7p112 Description: The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, via a crafted statistics or filegen configuration command that is not enabled during compilation...

PT-2015-6804 · Ntf +6 · Ntp +6

Name of the Vulnerable Software and Affected Versions: NTP versions prior to 4.2.7p366 Description: The issue allows remote attackers to cause a denial of service, potentially via a crafted NTP packet. This is due to improper type conversions from a precision value to a double in the ULOGTOD...

PT-2015-6797 · Nts +5 · Ntp +5

Name of the Vulnerable Software and Affected Versions: ntp versions prior to 4.2.7p42 Description: The issue allows remote attackers to cause a denial of service, resulting in the ntpd crash, via crafted logconfig commands. This is due to an uninitialized variable when processing malformed...