Lucene search
K

33 matches found

Cvelist
Cvelist
added 2024/03/26 12:0 a.m.17 views

CVE-2024-26577

VSeeFace through 1.13.38.c2 allows attackers to cause a denial of service application hang via a spoofed UDP packet containing at least 10 digits in JSON data...

6.6AI score0.00083EPSS
Exploits0References1
F5 Networks
F5 Networks
added 2024/03/25 7:55 p.m.36 views

K000139026: NTP vulnerability CVE-2009-3563

Security Advisory Description ntprequest.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service CPU and bandwidth consumption by using MODEPRIVATE to send a spoofed 1 request or 2 response packet that triggers a continuous exchange of MODEPRIVATE error...

6.4CVSS7.5AI score0.81107EPSS
Exploits3
F5 Networks
F5 Networks
added 2023/02/21 6:47 p.m.37 views

K44305703: NTP vulnerability CVE-2020-11868

Security Advisory Description The ntpd daemon in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid orig...

7.5CVSS6.5AI score0.01497EPSS
Exploits0Affected Software13
SUSE CVE
SUSE CVE
added 2023/02/15 5:2 a.m.2 views

SUSE CVE-2016-4953

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service ephemeral-association demobilization by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time...

7.5CVSS7.6AI score0.12716EPSS
Exploits0References14
Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
added 2021/05/24 6:3 a.m.159 views

What is Ping of Death Assault?

Ping of death is a strategy for DoS Denial of Service assault. It’s an attack-type that objectifies the ICMP Internet Control Message Protocol and the TCP Transmission Control Protocol, and is quite possibly the most undermining of all ICMP attacks. The ping of death attack is otherwise called a...

0.1AI score
Exploits0
Veracode
Veracode
added 2019/05/02 5:34 a.m.28 views

Denial Of Service (DoS)

ntp is vulnerable to denial of service DoS. The vulnerability exists through a spoofed packet from a legitimate ntpd server...

7.2CVSS6AI score0.05403EPSS
Exploits3References35Affected Software1
seebug.org
seebug.org
added 2017/10/11 12:0 a.m.116 views

Network Time Protocol Broadcast Mode Poll Interval Enforcement Denial of Service Vulnerability(CVE-2016-7428)

Summary An exploitable denial of service vulnerability exists in the broadcast mode poll interval enforcement functionality of ntpd. To limit abuse, ntpd restricts the rate at which each broadcast association will process incoming packets. ntpd will reject broadcast mode packets that arrive befor...

5.8CVSS7.2AI score0.08603EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2016/11/22 11:17 a.m.28 views

CVE-2016-7433

A flaw was found in the way ntpd calculated the root delay. A remote attacker could send a specially-crafted spoofed packet to cause denial of service or in some special cases even crash...

5.3CVSS3AI score0.06848EPSS
Exploits0References2
OSV
OSV
added 2016/07/05 1:59 a.m.4 views

CVE-2016-4956

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service interleaved-mode transition and time change via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548...

5.3CVSS7.1AI score
Exploits0References33
OSV
OSV
added 2016/07/05 1:59 a.m.1 views

DEBIAN-CVE-2016-4953

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service ephemeral-association demobilization by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time...

7.5CVSS7AI score0.12716EPSS
Exploits0References1
OSV
OSV
added 2016/07/05 1:59 a.m.4 views

CVE-2016-4953

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service ephemeral-association demobilization by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time...

7.5CVSS7.5AI score
Exploits0References32
UbuntuCve
UbuntuCve
added 2016/07/05 1:59 a.m.33 views

CVE-2016-4953

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service ephemeral-association demobilization by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time...

7.5CVSS6.9AI score0.12716EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2016/07/05 1:0 a.m.29 views

CVE-2016-4955

ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service peer-variable clearing and association outage by sending 1 a spoofed crypto-NAK packet or 2 a packet with an incorrect MAC value at a certain time...

5.9CVSS6.5AI score0.01749EPSS
Exploits0
Cvelist
Cvelist
added 2016/07/05 1:0 a.m.25 views

CVE-2016-4953

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service ephemeral-association demobilization by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time...

7.4AI score0.12716EPSS
Exploits0References32
UbuntuCve
UbuntuCve
added 2016/07/04 12:0 a.m.26 views

CVE-2016-4955

ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service peer-variable clearing and association outage by sending 1 a spoofed crypto-NAK packet or 2 a packet with an incorrect MAC value at a certain time...

5.9CVSS6.8AI score0.01749EPSS
Exploits0References3
ArchLinux
ArchLinux
added 2016/06/04 12:0 a.m.38 views

ntp: distributed denial of service amplification

CVE-2016-4953 distributed denial of service amplification An attacker who knows the origin timestamp and can send a spoofed packet containing a CRYPTO-NAK to an ephemeral peer target before any other response is sent can demobilize that association. Credit to Miroslav Lichvar of Red Hat -...

5CVSS0.7AI score0.53716EPSS
Exploits4References10
Amazon
Amazon
added 2016/06/02 12:0 a.m.57 views

Medium: ntp

Issue Overview: It was found that an ntpd client could be forced to change from basic client/server mode to the interleaved symmetric mode. A remote attacker could use a spoofed packet that, when processed by an ntpd client, would cause that client to reject all future legitimate server responses...

7.2CVSS7AI score0.05403EPSS
Exploits4
Tenable Nessus
Tenable Nessus
added 2016/06/01 12:0 a.m.83 views

CentOS 6 / 7 : ntp (CESA-2016:1141)

An update for ntp is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.5CVSS6.5AI score0.05403EPSS
Exploits6References7
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.36 views

FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS (5)

No description provided by source. source: http://www.securityfocus.com/bid/2666/info A number of TCP/IP stacks are vulnerable to a loopback condition initiated by sending a TCP SYN packet with the source address and port spoofed to equal the destination source and port. When a packet of this sor...

7.1AI score
Exploits0
OSV
OSV
added 2010/02/08 8:30 p.m.1 views

DEBIAN-CVE-2010-0292

The readfromcmdsocket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service CPU and bandwidth consumption by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a...

5CVSS6.9AI score0.0119EPSS
Exploits0References1
Rows per page
Query Builder