1171 matches found
Rockwell Automation Stratix Network Time Protocol ntpq atoascii Memory Corruption (CVE-2015-7852)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Network Time Protocol Password Length Memory Corruption (CVE-2015-7854)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Denial of Service AutoKey Malicious Message (CVE-2015-7702)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Network Time Protocol ntpd Multiple Integer Overflow Read Access Violations (CVE-2015-7848)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
CLSA-2023-1699468766 Fix CVE(s): CVE-2018-12327
SECURITY UPDATE: Arbitrary code execution vulnerability in ntpq/ntpdc - debian/patches/CVE-2018-12327.patch: fix stack buffer overflow in NTPQ/NTPDC. - CVE-2018-12327...
TETRA BURST Security Vulnerability
TETRA BURST is a terrestrial trunked radio standard for radio communications from TETRA BURST. A security vulnerability exists in TETRA BURST that stems from the Air Interface Encryption AIE keystream generator's dependence on network time, which can be publicly broadcast in an unauthenticated...
CVE-2023-45467
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings...
The vulnerability of the NTPsec network time protocol lies in its incomplete recognition of internal conditions, allowing attackers to trigger a service failure.
The vulnerability of the NTPsec network time protocol implementation is related to incomplete recognition of internal conditions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACTs WP 6xxx, allows a perpetrator to gain full access to the device.
The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems like PHOENIX CONTACT WP 6xxx exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability can allow a malicious actor, operating remotely,...
PT-2023-32968 · Unknown · Rustls-Webpki
Name of the Vulnerable Software and Affected Versions: rustls-webpki versions prior to 0.3.7 Description: The issue arises during startup when an attacker can intercept traffic to and from NTS key exchange servers, triggering an expensive key validation process due to a vulnerability in webpki...
The vulnerability of the Network Time Protocol determination function of the Zyxel NBG6604 switch allows a perpetrator to execute operating system commands.
The vulnerability of the Network Time Protocol NTP function of the Zyxel NBG6604 switch lies in the possibility of executing commands. Exploiting this vulnerability allows a remote attacker to execute operating system commands by sending a specially crafted HTTP request...
Zyxel NBG6604 操作系统命令注入漏洞
The Zyxel NBG6604 is a dual-band wireless router from China's Hopkins Zyxel. The Zyxel NBG6604 V1.01ABIR.1C0 suffers from a command injection vulnerability that stems from a failure to properly filter constructed command special characters, commands, etc. in the NTP function. An attacker can...
Fedora: Security Advisory for ntpsec (FEDORA-2023-26cbce3854)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for ntpsec (FEDORA-2023-9fa8f29bb7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: ntpsec-1.2.2a-1.fc38
NTPsec is a more secure and improved implementation of the Network Time Protocol derived from the original NTP project...
[SECURITY] Fedora 37 Update: ntpsec-1.2.2a-1.fc37
NTPsec is a more secure and improved implementation of the Network Time Protocol derived from the original NTP project...
SUSE CVE-2023-4012
ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...
CVE-2023-4012
ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...