Ubuntu: Security Advisory (USN-3096-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : NTP vulnerabilities (USN-3096-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3096-1 advisory. Aanchal Malhotra discovered that NTP incorrectly handled authenticated broadcast mode. A remote attacker could use this issue to perform a...

Oracle Linux 6 : ntp (ELSA-2016-3613)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3613 advisory. 4.2.6p5-10.0.1.el68.1 - add disable monitor to default ntp.conf CVE-2013-5211 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 7 : ntp (ELSA-2016-3612)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3612 advisory. 4.2.6p5-22.0.1.el72.2 - add disable monitor to default ntp.conf CVE-2013-5211 Tenable has extracted the preceding description block directly from the Oracle Lin...

ntp security update

4.2.6p5-22.0.1.el72.2 - add disable monitor to default ntp.conf CVE-2013-5211...

ntp security update

4.2.6p5-10.0.1.el68.1 - add disable monitor to default ntp.conf CVE-2013-5211...

AIX 7.2 TL 0 : ntp (IV87939) (deprecated)

NTPv3 and NTPv4 are vulnerable to : https://vulners.com/cve/CVE-2015-7974 NTP could allow a remote authenticated attacker to conduct spoofing attacks, caused by a missing key check. An attacker could exploit this vulnerability to impersonate a peer. NTP could allow a local attacker to bypass...

SUSE SLES10 Security Update : ntp (SUSE-SU-2016:1912-1)

NTP was updated to version 4.2.8p8 to fix several security issues and to ensure the continued maintainability of the package. These security issues were fixed : CVE-2016-4953: Bad authentication demobilized ephemeral associations bsc982065. CVE-2016-4954: Processing spoofed server packets...

Cisco IOS XE NTP Packet Handling Remote DoS (cisco-sa-20160804-wedge)

According to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability due to insufficient checks on clearing invalid Network Time Protocol NTP packets from the interface queue. An unauthenticated, remote...

SUSE SLES11 Security Update : ntp (SUSE-SU-2016:1602-1)

ntp was updated to version 4.2.8p8 to fix five security issues. These security issues were fixed : - CVE-2016-4953: Bad authentication demobilizes ephemeral associations bsc982065. - CVE-2016-4954: Processing spoofed server packets bsc982066. - CVE-2016-4955: Autokey association reset bsc982067. ...

Cisco IOS NTP Packet Handling Remote DoS (cisco-sa-20160804-wedge)

According to its self-reported version and configuration, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability due to insufficient checks on clearing invalid Network Time Protocol NTP packets from the interface queue. An unauthenticated, remote...

NTP Vulnerabilities

The open source ntp project has been found to contain several vulnerabilities CVE-2015-8158, CVE-2015-8138, CVE-2015-7979, CVE-2015-7978, CVE-2015-7977, CVE-2015-7976, CVE-2015-7975, CVE-2015-7974, CVE-2015-7973, all released in January 2016. Palo Alto...

FreeBSD : FreeBSD -- Multiple ntp vulnerabilities (7cfcea05-600a-11e6-a6c3-14dae9d210b8)

Multiple vulnerabilities have been discovered in the NTP suite : The fix for Sec 3007 in ntp-4.2.8p7 contained a bug that could cause ntpd to crash. CVE-2016-4957, Reported by Nicolas Edet of Cisco An attacker who knows the origin timestamp and can send a spoofed packet containing a CRYPTO-NAK to...

Cisco IOS XE Software Crafted Network Time Protocol Packets Denial of Service Vulnerability

A vulnerability in the processing of Network Time Protocol NTP packets by Cisco IOS XE could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual denial of service DoS condition on the affected device. The vulnerability is due to insufficient checks on clearing th...

Updated openntpd/busybox packages fix security vulnerability

The busybox NTP implementation doesn't check the NTP mode of packets received on the server port and responds to any packet with the right size. This includes responses from another NTP server. An attacker can send a packet with a spoofed source address in order to create an infinite loop of...

MGASA-2016-0277 Updated openntpd/busybox packages fix security vulnerability

The busybox NTP implementation doesn't check the NTP mode of packets received on the server port and responds to any packet with the right size. This includes responses from another NTP server. An attacker can send a packet with a spoofed source address in order to create an infinite loop of...

CVE-2016-1478

Cisco IOS 15.53S3, 15.61S2, 15.62S1, and 15.62T1 does not properly dequeue invalid NTP packets, which allows remote attackers to cause a denial of service interface wedge by sending many crafted NTP packets, aka Bug ID CSCva35619...

Design/Logic Flaw

Cisco IOS 15.53S3, 15.61S2, 15.62S1, and 15.62T1 does not properly dequeue invalid NTP packets, which allows remote attackers to cause a denial of service interface wedge by sending many crafted NTP packets, aka Bug ID CSCva35619...

CVE-2016-1478

CVE-2016-1478 affects Cisco IOS and IOS XE: Cisco IOS versions 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 fail to properly dequeue/clear invalid NTP packets, enabling an unauthenticated remote attacker to cause an interface wedge and DoS by sending many crafted NTP packets. The issue stems fr...

Cisco IOS Software Crafted Network Time Protocol Packets Denial of Service Vulnerability (cisco-sa-20160804-wedge)

A vulnerability in the processing of Network Time Protocol NTP packets by Cisco IOS could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual denial of service DoS condition on the affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions...