1022 matches found
NTP 缓冲区错误漏洞
NTP is a network time protocol from nwtime open source. A security vulnerability exists in NTP version 4.2.8p15, which stems from an out-of-bounds write when adding a decimal point to mstolfp in libntp/mstolfp.c. The vulnerability is caused by the use of an out-of-bounds write when adding a decim...
NTP 缓冲区错误漏洞
NTP is a network time protocol from nwtime open source. A security vulnerability exists in NTP version 4.2.8p15, which stems from an out-of-bounds write in the mstolfp presence loop in libntp/mstolfp.c. The vulnerability is caused by the presence of an out-of-bounds write in the libntp/mstolfp lo...
PT-2023-2768 · Ntp +4 · Ntp +4
Name of the Vulnerable Software and Affected Versions: NTP version 4.2.8p15 Description: The issue is related to an out-of-bounds write when copying the trailing number in the mstolfp function in libntp/mstolfp.c. This can be exploited by sending a specially crafted request, potentially allowing ...
PT-2023-2770 · Ntp +3 · Ntp +3
Name of the Vulnerable Software and Affected Versions: NTP version 4.2.8p15 Description: The issue is related to an out-of-bounds write in the praecis parse function in ntpd/refclock palisade.c. This could potentially allow a remote attacker to cause a denial of service by sending a specially...
PT-2023-2552 · Ntp +5 · Ntp +5
Name of the Vulnerable Software and Affected Versions: NTP versions 4.2.8p15 Description: The issue is related to an out-of-bounds write in the mstolfp function when adding a decimal point. This can be exploited by an adversary to potentially execute arbitrary code by sending a specially crafted...
NTP 缓冲区错误漏洞
NTP is nwtime open source a network time protocol. A buffer error vulnerability exists in NTP version 4.2.8p15, which stems from an out-of-bounds write to mstolfp in libntp/mstolfp.c when adding special characters. A remote attacker could exploit this vulnerability to execute arbitrary code...
NTP 缓冲区错误漏洞
NTP is a network time protocol from nwtime open source. A security vulnerability exists in NTP version 4.2.8p15, which stems from an out-of-bounds write when copying trailing digits in libntp/mstolfp.c's mstolfp...
PT-2023-2537 · Ntp +5 · Ntp +5
Name of the Vulnerable Software and Affected Versions: NTP version 4.2.8p15 Description: The issue is related to an out-of-bounds write in the mstolfp function in libntp/mstolfp.c. This can be exploited by sending a specially-crafted request to cause a denial of service. The vulnerability may all...
PT-2023-2769 · Ntp +4 · Ntp +4
Name of the Vulnerable Software and Affected Versions: NTP versions 4.2.8p15 Description: The issue is related to an out-of-bounds write in the mstolfp function in libntp/mstolfp.c when adding a '0' character. This can be exploited by a remote attacker to potentially execute arbitrary code by...
The vulnerability of the Eltex “ESR-200” network interface device allows a intruder to obtain preliminary information about the device.
The vulnerability of the NTPD microprogramming-based service router “ESR-20” is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain preliminary information about the device...
The vulnerability of the NTP synchronization protocol implemented by the Ethernet interface device Eltex “ESR-200” allows attackers to execute malicious code or enhance their privileges within the system.
The vulnerability of the NTP synchronization protocol implemented by the Ethernet interface device Eltex “ESR-200” is related to uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to execute malicious code or increase their privileges...
Debian: Security Advisory (DLA-559-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-742-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
K10600056: NTP vulnerability CVE-2015-5300
Security Advisory Description It was found that ntpd did not correctly implement the threshold limitation for the '-g' option, which is used to set the time without any restrictions. CVE-2015-5300 Impact A man-in-the-middle attacker able to intercept network time protocol NTP traffic between a...
K15928: Network Time Protocol vulnerability CVE-2009-1252
Security Advisory Description Stack-based buffer overflow in the cryptorecv function in ntpcrypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field...
K13540723: NTP vulnerability CVE-2018-7184
Security Advisory Description ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service disruption by sending a packet with a zero-origin timestamp causing the association to reset and setting the...
K09940637: NTP vulnerability CVE-2019-11331
Security Advisory Description Network Time Protocol NTP, as specified in RFC 5905, uses port 123 even for modes where a fixed port number is not required, which makes it easier for remote attackers to conduct off-path attacks. CVE-2019-11331 Impact Using an off-path attack not a man-in-the-middle...
SUSE CVE-2004-0657
Integer overflow in the NTP daemon NTPd before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time...
SUSE CVE-2009-0021
NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to...