1177 matches found
Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in Network Time Protocol (NTP)
Summary The following vulnerabilities in Network Time Protocol NTP have been addressed by IBM Flex System Chassis Management Module CMM. Vulnerability Details CVEID: CVE-2020-11868 DESCRIPTION: NTP is vulnerable to a denial of service, caused by a flaw in ntpd. By sending a server mode packet wit...
PT-2023-30777 · Microsoft · Azure Rtos Netx Duo
Name of the Vulnerable Software and Affected Versions: Azure RTOS NetX Duo versions prior to 6.3.0 Description: The issue affects Azure RTOS NetX Duo, a TCP/IP network stack for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow...
PT-2023-35597 · Pcpp · Pcpp
Name of the Vulnerable Software and Affected Versions: pcpp affected versions not specified Description: The issue is related to a stack-buffer-overflow read error. It occurs in the getReferenceIdentifierString function within the NtpLayer of the pcpp library, which is called by the...
Rockwell Automation Stratix Network Time Protocol ntpq atoascii Memory Corruption (CVE-2015-7852)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Denial of Service CRYPTO_ASSOC Memory Leak (CVE-2015-7701)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Network Time Protocol ntpd Multiple Integer Overflow Read Access Violations (CVE-2015-7848)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Network Time Protocol Remote Configuration Denial of Service (CVE-2015-7850)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Denial of Service AutoKey Malicious Message (CVE-2015-7702)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Network Time Protocol Password Length Memory Corruption (CVE-2015-7854)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
CLSA-2023-1699468766 Fix CVE(s): CVE-2018-12327
SECURITY UPDATE: Arbitrary code execution vulnerability in ntpq/ntpdc - debian/patches/CVE-2018-12327.patch: fix stack buffer overflow in NTPQ/NTPDC. - CVE-2018-12327...
TETRA BURST Security Vulnerability
TETRA BURST is a terrestrial trunked radio standard for radio communications from TETRA BURST. A security vulnerability exists in TETRA BURST that stems from the Air Interface Encryption AIE keystream generator's dependence on network time, which can be publicly broadcast in an unauthenticated...
CVE-2023-45467
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings...
The vulnerability of the NTPsec network time protocol lies in its incomplete recognition of internal conditions, allowing attackers to trigger a service failure.
The vulnerability of the NTPsec network time protocol implementation is related to incomplete recognition of internal conditions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACTs WP 6xxx, allows a perpetrator to gain full access to the device.
The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems like PHOENIX CONTACT WP 6xxx exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability can allow a malicious actor, operating remotely,...
PT-2023-32968 · Unknown · Rustls-Webpki
Name of the Vulnerable Software and Affected Versions: rustls-webpki versions prior to 0.3.7 Description: The issue arises during startup when an attacker can intercept traffic to and from NTS key exchange servers, triggering an expensive key validation process due to a vulnerability in webpki...
The vulnerability of the Network Time Protocol determination function of the Zyxel NBG6604 switch allows a perpetrator to execute operating system commands.
The vulnerability of the Network Time Protocol NTP function of the Zyxel NBG6604 switch lies in the possibility of executing commands. Exploiting this vulnerability allows a remote attacker to execute operating system commands by sending a specially crafted HTTP request...
Fedora: Security Advisory for ntpsec (FEDORA-2023-9fa8f29bb7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Zyxel NBG6604 操作系统命令注入漏洞
The Zyxel NBG6604 is a dual-band wireless router from China's Hopkins Zyxel. The Zyxel NBG6604 V1.01ABIR.1C0 suffers from a command injection vulnerability that stems from a failure to properly filter constructed command special characters, commands, etc. in the NTP function. An attacker can...
Fedora: Security Advisory for ntpsec (FEDORA-2023-26cbce3854)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
