NTP Local Denial of Service Vulnerability (CNVD-2017-04413)

ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A denial of service vulnerability exists in ntpd versions prior to 4.2.8p9. An attacker can exploit this vulnerability remotely or...

NTP Local Denial of Service Vulnerability (CNVD-2017-04411)

NTP is Network Time Protocol NTP, which is a protocol used to synchronize the time of individual computers on a network. A local denial of service vulnerability exists in NTP, where the Windows installer of NTP enables a local user to cause a denial of service via a route related to a parameter...

NTP Local Denial of Service Vulnerability (CNVD-2017-04410)

ntpd Network Time Protocol daemon is an operating system daemon that uses the Network Time Protocol NTP to keep synchronized with the system time of a time server. A denial of service vulnerability exists in ntpd versions prior to 4.2.8p9. An attacker can exploit this vulnerability remotely or...

NTP 'ctl_put()' function buffer overflow vulnerability

Network Time Protocol NTP is a protocol used to synchronize computer time. NTP suffers from a buffer overflow vulnerability in the ctlput function, which can be exploited by an attacker to execute arbitrary code in the context of an affected application...

NTP Local Stack Buffer Overflow Vulnerability

Network Time Protocol NTP is a protocol used to synchronize computer time. NTP suffers from a local stack buffer overflow vulnerability, where an attacker can cause a stack buffer overflow by sending a constructed response to a malicious server, resulting in a crash or arbitrary code execution...

NTP Denial of Service Vulnerability (CNVD-2017-04415)

NTP is Network Time Protocol NTP, which is a protocol used to synchronize the time of individual computers on a network. A denial of service vulnerability exists in NTP, which can be exploited by a remote attacker to cause a denial of service ntpd crash via a malformed mode configuration command...

NTP DPTS Local Buffer Overflow Vulnerability

Network Time Protocol NTP is a protocol used to synchronize computer time. A buffer overflow vulnerability exists in the NTP DPTS Clock. An attacker could exploit this vulnerability to send a constructed response that would cause a stack buffer overflow, resulting in a crash or arbitrary code...

NTP Denial of Service Vulnerability (CNVD-2017-04414)

NTP is Network Time Protocol NTP, which is a protocol used to synchronize the time of individual computers on a network. NTP has a denial-of-service vulnerability that can be exploited by an attacker to cause a denial of service daemon crash via an invalid setting in the :config directive...

NTP Denial of Service Vulnerability (CNVD-2017-04247)

Network Time Protocol NTP is a protocol used to synchronize computer time. A denial-of-service security vulnerability exists in the NTP origin timestamp check function, which can be exploited by an attacker to crash an affected application...

Network Time Protocol (NTP) Mode 6 Scanner

The remote NTP server responds to mode 6 queries. Devices that respond to these queries have the potential to be used in NTP amplification attacks. An unauthenticated, remote attacker could potentially exploit this, via a specially crafted mode 6 query, to cause a reflected denial of service...

Cisco Nexus 7000 Series Switches Access-Control Filtering Mechanisms Bypass Vulnerability

A vulnerability in certain access-control filtering mechanisms on Cisco Nexus 7000 Series Switches could allow an unauthenticated, remote attacker to bypass defined traffic configured within an access control list ACL on the affected system. The vulnerability is due to the device failing to inspe...

tcpdump buffer overflow vulnerability (CNVD-2017-02237)

tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. A buffer overflow vulnerability exists in the rtpprint function of...

CentOS 6 / 7 : ntp (CESA-2017:0252)

An update for ntp is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CentOS Update for ntp CESA-2017:0252 centos6

Check the version of ntp SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882654";...

CentOS Update for ntp CESA-2017:0252 centos7

Check the version of ntp SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882653";...

ntp, ntpdate, sntp security update

CentOS Errata and Security Advisory CESA-2017:0252 An update for ntp is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...

ntp: Mode 6 unauthenticated trap information disclosure and DDoS vector

A flaw was found in the control mode functionality of ntpd. A remote attacker could send a crafted control mode packet which could lead to information disclosure or result in DDoS amplification attacks...

ntp: Attack on interface selection

A flaw was found in the way ntpd running on a host with multiple network interfaces handled certain server responses. A remote attacker could use this flaw which would cause ntpd to not synchronize with the source...

ntp: Broken initial sync calculations regression

A flaw was found in the way ntpd calculated the root delay. A remote attacker could send a specially-crafted spoofed packet to cause denial of service or in some special cases even crash...

ntp: Null pointer dereference when trap service is enabled

A flaw was found in the way ntpd implemented the trap service. A remote attacker could send a specially crafted packet to cause a null pointer dereference that will crash ntpd, resulting in a denial of service...