607 matches found
EulerOS 2.0 SP11 : ntp (EulerOS-SA-2023-2658)
According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cpcpdec while loop. An adversary may be able to attack a client ntpq...
EulerOS Virtualization 2.9.0 : ntp (EulerOS-SA-2023-2990)
According to the versions of the ntp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cpcpdec while loop. An adversary may be able to attack ...
Amazon Linux 2 : ntp (ALAS-2024-2396)
The version of ntp installed on the remote host is prior to 4.2.8p15-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2396 advisory. 2024-02-15: CVE-2023-26555 was added to this advisory. mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds wri...
Rockwell Automation Stratix Denial of Service by Priming the Pump (CVE-2015-7705)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Network Time Protocol Reference Clock Memory Corruption (CVE-2015-7853)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Denial of Service CRYPTO_ASSOC Memory Leak (CVE-2015-7701)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Denial of Service AutoKey Malicious Message (CVE-2015-7692)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Denial of Service AutoKey Malicious Message (CVE-2015-7702)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Denial of Service AutoKey Malicious Message (CVE-2015-7691)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Denial of Service by Spoofed Kiss-o'-Death (CVE-2015-7704)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
ntpd has Dependency on Vulnerable Third-Party Component
During startup, an attacker that can man-in-the-middle traffic to and from NTS key exchange servers can trigger a very expensive key validation process due to a vulnerability in webpki. Impact This vulnerability can lead to excessive cpu usage on startup on clients configured to use NTS Patches...
SUSE CVE-2023-4012
ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...
EulerOS 2.0 SP9 : ntp (EulerOS-SA-2023-2621)
According to the versions of the ntp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cpcpdec while loop. An adversary may be able to attack a client ntpq...
CVE-2023-4012
ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...
Design/Logic Flaw
ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...
CVE-2023-4012
ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...
CVE-2023-4012
CVE-2023-4012 affects the ntpsec/ntpd stack used on Linux hosts; the vulnerability causes a crash (DoS) when a non-NTS server receives an NTS-enabled client request (mode 3). The issue is documented across multiple security advisories (Fedora FEDORA-2023-26cbce3854, Fedora 37/38 patches) and Ness...
CVE-2023-4012
ntpd will crash if the server is not NTS-enabled no certificate and it receives an NTS-enabled client request mode 3...
