Lucene search
K

7 matches found

OSV
OSV
added 2017/01/13 4:59 p.m.1 views

DEBIAN-CVE-2016-7434

The readmrulist function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service crash via a crafted mrulist query...

7.5CVSS6.1AI score0.62378EPSS
Exploits7References1
UbuntuCve
UbuntuCve
added 2017/01/13 12:0 a.m.31 views

CVE-2016-7434

The readmrulist function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service crash via a crafted mrulist query...

7.5CVSS7AI score0.62378EPSS
Exploits7References2
Tenable Nessus
Tenable Nessus
added 2016/11/29 12:0 a.m.1941 views

Network Time Protocol Daemon (ntpd) read_mru_list() Remote DoS

The remote NTP server is affected by a denial of service vulnerability due to improper validation of mrulist queries. An unauthenticated, remote attacker can exploit this, via a specially crafted NTP mrulist query packet, to terminate the ntpd process. Note that the NTP server is reportedly...

7.5CVSS7AI score0.62378EPSS
Exploits7References3
GithubExploit
GithubExploit
added 2016/11/22 7:42 p.m.6 views

Exploit for Improper Input Validation in Ntp

CVE-2016-7434 ntpd DOS exploit !Docker Pullshttps://img.sh...

7.5CVSS7.3AI score0.62378EPSS
Exploits7
RedhatCVE
RedhatCVE
added 2016/11/22 10:47 a.m.35 views

CVE-2016-7434

The readmrulist function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service crash via a crafted mrulist query...

7.5CVSS5.3AI score0.62378EPSS
Exploits7References2
CERT
CERT
added 2016/11/21 12:0 a.m.142 views

NTP.org ntpd contains multiple denial of service vulnerabilities

Overview NTP.org ntpd versions ntp-4.2.7p385 up to but not including ntp-4.2.8p9 and ntp-4.3.0 up to but not including ntp-4.3.94 contain multiple denial of service vulnerabilities. Description NTP.org's ntpd, versions ntp-4.2.7p385 up to but not including ntp-4.2.8p9 and ntp-4.3.0 up to but not...

7.5CVSS7.4AI score0.62378EPSS
Exploits12References2
Hacker One
Hacker One
added 2016/06/25 9:36 p.m.60 views

Internet Bug Bounty: ntpd: read_mru_list() does inadequate incoming packet checks

Summary: If ntpd is configured to allow mrulist query requests from a server that sends a crafted malicious packet, ntpd will crash on receipt of that crafted malicious mrulist query packet. Mitigation: - Only allow mrulist query packets from trusted hosts. - Implement BCP-38. - Upgrade to 4.2.8p...

4.3CVSS6.5AI score0.62378EPSS
Exploits7
Rows per page
Query Builder