RHEL 7 : chrony (RHSA-2015:2241)

Updated chrony packages that fix three security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

ntp: ntpd accepts unauthenticated packets with symmetric key crypto

It was found that ntpd did not check whether a Message Authentication Code MAC was present in a received packet when ntpd was configured to use symmetric cryptographic keys. A man-in-the-middle attacker could use this flaw to send crafted packets that would be accepted by a client or a peer witho...

ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems

A flaw was found in the way the ntp-keygen utility generated MD5 symmetric keys on big-endian systems. An attacker could possibly use this flaw to guess generated MD5 keys, which could then be used to spoof an NTP client or server...

ntp: drop packets with source address ::1

It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by spoofing ::1 addresses...

ntp: authentication doesn't protect symmetric associations against DoS attacks

A denial of service flaw was found in the way NTP hosts that were peering with each other authenticated themselves before updating their internal state variables. An attacker could send packets to one peer host, which could cascade to other peers, and stop the synchronization process among the...

Moderate: Red Hat Security Advisory: ntp security, bug fix, and enhancement update

Updated ntp packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

ntp: drop packets with source address ::1

It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by spoofing ::1 addresses...

chrony: Heap out of bound write in address filter

An out-of-bounds write flaw was found in the way Chrony stored certain addresses when configuring NTP or cmdmon access. An attacker that has the command key and is allowed to access cmdmon only localhost is allowed by default could use this flaw to crash chronyd or, possibly, execute arbitrary co...

Moderate: Red Hat Security Advisory: chrony security, bug fix, and enhancement update

Updated chrony packages that fix three security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

网络时间协议 NTP KoD 拒绝服务攻击

No description provided by source...

Network Time Protocol Security Bypass Vulnerability

Network Time Protocol is a set of protocols for synchronizing computer clocks over a network. A security bypass vulnerability exists in Network Time Protocol that could allow a remote attacker to perform a man-in-the-middle attack to bypass security restrictions and perform unauthorized operation...

[SECURITY] Fedora 21 Update: ntp-4.2.6p5-34.fc21

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

Debian DSA-3388-1 : ntp - security update

Several vulnerabilities were discovered in the Network Time Protocol daemon and utility programs : - CVE-2015-5146 A flaw was found in the way ntpd processed certain remote configuration packets. An attacker could use a specially crafted package to cause ntpd to crash if : - ntpd enabled remote...

[SECURITY] [DSA 3388-1] ntp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3388-1 [email protected] https://www.debian.org/security/ Kurt Roeckx November 01, 2015 https://www.debian.org/security/faq -...

NTP Local Buffer Overflow Vulnerability

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. An NTP program running a custom refclock driver fails to check for a negative value of the 'datalen' parameter, allowing a local attacker to exploit the vulnerability for denial of service attacks...

NTP Buffer Overflow Vulnerability

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. NTP has a security vulnerability that allows a remote attacker to crash a background process by sending NTP packets when the program allows remote configuration...

NTP 'ntpq.c' Memory Corruption Vulnerability

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. NTP has a security vulnerability that allows a remote attacker to send a set of Mode 6 response packets to perform a denial-of-service attack...

NTP Denial of Service Vulnerability (CNVD-2015-07183)

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. NTP has a security vulnerability that allows a remote attacker to send Mode 6 MODECONTROL or Mode 7 MODEPRIVATE packets with large values to crash a background program...

DSA-3388-1 ntp - security update

Bulletin has no description...

NTP Authentication Bypass Vulnerability

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. NTP has a security vulnerability that allows a remote attacker to send NTP packets authenticated with a data password, insert malicious time data, and cause the system clock to be set incorrectly...