[SECURITY] Fedora 22 Update: ntp-4.2.6p5-40.fc22

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

RedHat Update for ntp RHSA-2016:0780-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: ntp security and bug fix update

An update for ntp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

ntp: incomplete checks in ntp_crypto.c

It was found that the fix for CVE-2014-9750 was incomplete: three issues were found in the value length checks in NTP's ntpcrypto.c, where a packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a specially...

ntp: crash with crafted logconfig configuration command

It was found that ntpd could crash due to an uninitialized variable when processing malformed logconfig configuration commands...

ntp: ntpd crash when processing config commands with statistics type

It was found that ntpd would exit with a segmentation fault when a statistics type that was not enabled during compilation e.g. timingstats was referenced by the statistics or filegen configuration command...

ntp: infinite loop in sntp processing crafted packet

It was discovered that the sntp utility could become unresponsive due to being caught in an infinite loop when processing a crafted NTP packet...

ntp: incomplete checks in ntp_crypto.c

It was found that the fix for CVE-2014-9750 was incomplete: three issues were found in the value length checks in NTP's ntpcrypto.c, where a packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a specially...

ntp: slow memory leak in CRYPTO_ASSOC

A memory leak flaw was found in ntpd's CRYPTOASSOC. If ntpd was configured to use autokey authentication, an attacker could send packets to ntpd that would, after several days of ongoing attack, cause it to run out of memory...

ntp: incomplete checks in ntp_crypto.c

It was found that the fix for CVE-2014-9750 was incomplete: three issues were found in the value length checks in NTP's ntpcrypto.c, where a packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a specially...

ntp: ntpq atoascii memory corruption vulnerability

An off-by-one flaw, leading to a buffer overflow, was found in cookedprint functionality of ntpq. A specially crafted NTP packet could potentially cause ntpq to crash...

ntp: stack exhaustion in recursive traversal of restriction list

A stack-based buffer overflow flaw was found in the way ntpd processed 'ntpdc reslist' commands that queried restriction lists with a large amount of entries. A remote attacker could use this flaw to crash ntpd...

[SECURITY] Fedora 23 Update: ntp-4.2.6p5-40.fc23

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

[SECURITY] Fedora 24 Update: ntp-4.2.6p5-40.fc24

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

ntpd System Time Modification Vulnerability

ntpd is an operating system daemon that uses the Network Time Protocol to keep synchronized with the system time of a time server. A security vulnerability in ntpd exists when the program uses trustedkey and does not have the feature introduced in ntp-4.2.8p6 enabled, allowing a remote attacker t...

ntpd system time modification vulnerability (CNVD-2016-02740)

ntpd is an operating system daemon that uses the Network Time Protocol to keep synchronized with the system time of a time server. A security vulnerability in ntpd allows a remote attacker to modify a client's system time by forging packets and changing the basic client/server mode to an...

ntpd crypto NAK Packet Denial of Service Vulnerability

ntpd is an operating system daemon that uses the Network Time Protocol to keep synchronized with the system time of a time server. A security vulnerability exists in ntpd that allows remote attackers to send crypto NAK packets with forged source addresses for denial-of-service attacks...

UBUNTU-CVE-2016-1548

An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimat...

FreeBSD-SA-16:16.ntp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:16.ntp Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities of ntp Category: contrib Module: ntp Announced: 2016-04-29 Credits: Network Time...

UBUNTU-CVE-2016-2518

The MATCHASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value...