CVE-2017-6455

NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPIDLLS environment variable...

CVE-2017-6463

NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service daemon crash via an invalid setting in a :config directive, related to the unpeer option...

CVE-2017-6458

Multiple buffer overflows in the ctlput functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable...

CVE-2017-6451

The mx4200send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write...

CVE-2017-6452

CVE-2017-6452 is a Windows NT P (NTP) installer issue described in the initial record as a stack-based buffer overflow via an application path on the command line in NTP before 4.2.8p10 and 4.3.x before 4.3.94. Connected document BSA-2017-292 confirms the vulnerability class and specifies affecte...

CVE-2017-6463

NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service daemon crash via an invalid setting in a :config directive, related to the unpeer option...

CVE-2017-6459

CVE-2017-6459 affects the Windows installer for ntp prior to 4.2.8p10 and ntp 4.3.x prior to 4.3.94. The vulnerability allows local users to cause unspecified impact via vectors related to an argument with multiple null bytes. Public references confirm the ntp update path: 4.2.8p10 and 4.3.94 con...

CVE-2017-6455

NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPIDLLS environment variable...

CVE-2017-6452

Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line...

CVE-2017-6458

Multiple buffer overflows in the ctlput functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable...

CVE-2017-6459

The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes...

CVE-2017-6460

Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response...

CVE-2017-6464

CVE-2017-6464: NTP denial of service via a malformed mode configuration directive. A remote authenticated attacker could crash ntpd. Affected are ntp in ntp 4.2.x prior to 4.2.8p10 and 4.3.x prior to 4.3.94. Connected advisories/entries confirm fixes and updates to remediate, e.g., Red Hat/CentOS...

CVE-2017-6464

NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service ntpd crash via a malformed mode configuration directive...

CVE-2017-6463

CVE-2017-6463 affects ntp ntpd; remote authenticated users can crash the daemon by sending an invalid :config directive setting (unpeer option). It exists in ntp releases before 4.2.8p10 and 4.3.x before 4.3.94. Impact is a denial of service via daemon crash. Remediation from the public advisory ...

CVE-2017-6460

CVE-2017-6460 affects NTP’s ntpqd/ntpq stack via a stack-based buffer overflow in the reslist handling, caused by a long flagstr in restriction list responses. A remote attacker could crash or destabilize the ntpd/ntpq process. Public documentation and vendor advisories (IBM IMM2/FSM, IBM CMM, F5...

CVE-2017-6464

NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service ntpd crash via a malformed mode configuration directive...

CVE-2017-6451

The mx4200send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write...

CVE-2017-6460

Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response...

Network Time Protocol Daemon (ntpd) 4.x < 4.2.8p10 Multiple Vulnerabilities

The version of the remote NTP server is 4.x prior to 4.2.8p10. It is, therefore, affected by the following vulnerabilities : - A denial of service vulnerability exists in the receive function within file ntpd/ntpproto.c due to the expected origin timestamp being cleared when a packet with a zero...