1542 matches found
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the integrity and accessibility of protected information
The multiple vulnerabilities in the ntp package up to version 4.2.4p6 of the Gentoo Linux operating system can lead to the compromise of the integrity and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the integrity and accessibility of protected information.
The vulnerability of the ntp package up to version 4.2.4p7-r1 of the Gentoo Linux operating system can lead to the compromise of the integrity and accessibility of protected information. This vulnerability can be exploited remotely...
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the ntp package up to version 4.2.8 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol allows a attacker to cause a service failure.
The vulnerability of the ntpd implementation of the Network Time Synchronization protocol is related to insufficient control over the amount of network messages transmitted. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted REQMONGETLIST...
[SECURITY] Fedora 20 Update: chrony-1.31.1-1.fc20
A client/server for the Network Time Protocol, this program keeps your computer's clock accurate. It was specially designed to support systems with intermittent internet connections, but it also works well in permanently connected environments. It can use also hardware reference clocks, system...
[SECURITY] Fedora 22 Update: ntp-4.2.6p5-30.fc22
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...
[SECURITY] Fedora 20 Update: ntp-4.2.6p5-22.fc20
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...
[SECURITY] Fedora 21 Update: chrony-1.31.1-1.fc21
A client/server for the Network Time Protocol, this program keeps your computer's clock accurate. It was specially designed to support systems with intermittent internet connections, but it also works well in permanently connected environments. It can use also hardware reference clocks, system...
[SECURITY] Fedora 22 Update: chrony-2.0-0.3.pre2.fc22
A client/server for the Network Time Protocol, this program keeps your computer's clock accurate. It was specially designed to support systems with intermittent internet connections, but it also works well in permanently connected environments. It can use also hardware reference clocks, system...
UBUNTU-CVE-2015-1821
Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a denial of service chronyd crash or possibly execute arbitrary code by configuring the 1 NTP or 2 cmdmon access with a subnet size that is indivisible by four and an address with a nonzero bit in the...
NTP 'ntp-keygen.c' Predictive Random Number Vulnerability
NTP Network Time Protocol is a protocol used by clients to synchronize the date and time with a time server. A security vulnerability in NTP 'ntp-keygen.c' allows attackers to take control of the server by guessing the MD5 generated key...
Debian DSA-3223-1 : ntp - security update
Multiple vulnerabilities were discovered in ntp, an implementation of the Network Time Protocol : - CVE-2015-1798 When configured to use a symmetric key with an NTP peer, ntpd would accept packets without MAC as if they had a valid MAC. This could allow a remote attacker to bypass the packet...
USN-2567-1: NTP vulnerabilities
Miroslav Lichvar discovered that NTP incorrectly validated MAC fields. A remote attacker could possibly use this issue to bypass authentication and spoof packets. CVE-2015-1798 Miroslav Lichvar discovered that NTP incorrectly handled certain invalid packets. A remote attacker could possibly use...
[SECURITY] [DSA 3223-1] ntp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3223-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini April 12, 2015 http://www.debian.org/security/faq -...
PT-2019-7172 · Chrony +3 · Chrony +3
Name of the Vulnerable Software and Affected Versions: chrony versions prior to 1.31.1 Description: The issue allows remote attackers with knowledge of NTP peering to cause a denial of service, specifically the inability to synchronize, by sending crafted NTP data packets with random timestamps i...
PT-2017-6668 · Nts +3 · Ntp +3
Name of the Vulnerable Software and Affected Versions: ntp versions 4.2.8px through 4.2.8p2-RC2 ntp versions 4.3.x through 4.3.12 Description: The issue is related to the generation of MD5 keys with insufficient entropy on big endian machines under specific conditions. This might allow remote...
Debian Security Advisory DSA 3223-1 (ntp - security update)
Multiple vulnerabilities were discovered in ntp, an implementation of the Network Time Protocol: CVE-2015-1798 When configured to use a symmetric key with an NTP peer, ntpd would accept packets without MAC as if they had a valid MAC. This could allow a remote attacker to bypass the packet...
DSA-3223-1 ntp - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3223-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
NTP MAC Spoofing Vulnerability
NTP Network Time Protocol is a protocol used by clients to synchronize the date and time with a time server. A MAC spoofing vulnerability exists in NTP. Due to NTP4 installation using symmetric key authentication when the unauthenticated code MAC is received. Allows an attacker to exploit the...