1171 matches found
CVE-2018-20053
An issue was discovered on Cerner Connectivity Engine CCE 4 devices. The hostname, timezone, and NTP server configurations on the CCE device are vulnerable to command injection by sending a crafted configuration file over the network...
CVE-2019-11331
Network Time Protocol NTP, as specified in RFC 5905, uses port 123 even for modes where a fixed port number is not required, which makes it easier for remote attackers to conduct off-path attacks...
Path traversal
Network Time Protocol NTP, as specified in RFC 5905, uses port 123 even for modes where a fixed port number is not required, which makes it easier for remote attackers to conduct off-path attacks...
CVE-2019-11331
CVE-2019-11331 concerns Network Time Protocol (NTP) implementations that use port 123 even when a fixed port isn’t required (per RFC 5905). The provided documents confirm an off‑path attack possibility due to port usage, describing it as enabling remote actors to conduct off‑path attacks against ...
CVE-2019-11331
Network Time Protocol NTP, as specified in RFC 5905, uses port 123 even for modes where a fixed port number is not required, which makes it easier for remote attackers to conduct off-path attacks...
[SECURITY] Fedora 30 Update: systemd-241-7.gita2eaa1c.fc30
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...
[SECURITY] Fedora 30 Update: systemd-241-5.git3d835d0.fc30
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...
[SECURITY] Fedora 29 Update: ntp-4.2.8p13-1.fc29
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts are in the ntp-perl package, ntpdate is in...
[SECURITY] Fedora 28 Update: ntp-4.2.8p13-1.fc28
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts are in the ntp-perl package, ntpdate is in...
[SECURITY] Fedora 30 Update: ntp-4.2.8p13-1.fc30
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts are in the ntp-perl package, ntpdate is in...
NTP: Multiple vulnerabilities
Background NTP contains software for the Network Time Protocol. Description Multiple vulnerabilities have been discovered in NTP. Please review the CVE identifiers referenced below for details. Impact An attacker could cause a Denial of Service condition, escalate privileges, or remotely execute...
The vulnerability of the fly-admin-ntp package for managing NTP time services on the Astra Linux operating system allows a perpetrator to cause a service failure.
The vulnerability of the fly-admin-ntp package for managing NTP time services on the Astra Linux operating system is related to incorrect syntax analysis and processing of the configuration file. Exploiting this vulnerability can allow an attacker to cause a service failure...
[SECURITY] Fedora 29 Update: systemd-239-12.git8bca462.fc29
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...
[SECURITY] Fedora 28 Update: systemd-238-11.gita76ee90.fc28
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...
Security Bulletin: Security Vulnerabilities in Network Time Protocol Daemon affect Intel Manycore Platform Software Stack for use on Intel Xeon Phi 3120A, Intel Xeon Phi 5110P, Intel Xeon Phi 7120A, and Intel Xeon Phi 7120P PCI-Express add-in cards
Summary Security Vulnerabilities in Network Time Protocal Daemon affects the Intel Manycore Platform Software Stack for use on the Intel Xeon Phi PCI-Express add-in cards. Vulnerability Details Abstract Security Vulnerabilities in Network Time Protocal Daemon affects the Intel Manycore Platform...
The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol, related to key management errors, allows a perpetrator to compromise data integrity.
The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol is related to key management errors. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of the protected information...
The vulnerability of the decodearr function in the NTP synchronization monitoring program allows a hacker to execute arbitrary code.
The vulnerability of the decodearr function in the NTP synchronization monitoring program is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code by using a specially created array in response to an ntpq request...
The vulnerability of the ntpd daemon, which implements the NTP synchronization protocol, is related to errors in processing input data. This allows a perpetrator to cause a service failure.
The vulnerability of the ntpd daemon, which implements the NTP synchronization protocol, is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending specially crafted packets...
NTPsec Out-of-Bounds Write Vulnerability
NTPsec is an implementation of the Network Time Protocol. An out-of-bounds write vulnerability exists in versions of NTPsec prior to 1.1.3, which can be exploited by an attacker to cause a denial of service by sending a malformed config request...