The vulnerability of the Datum Programmable Time Server (DPTS) refclock implementation of the Network Time Sync protocol allows a perpetrator to cause the ntpd daemon to fail by using the created device /dev/datum.

The vulnerability of the Datum Programmable Time Server DPTS’s refclock implementation of the Network Time Protocol NTP is related to the output of operations that exceed the buffer limits in memory. Exploiting this vulnerability could allow a attacker to cause a failure in the ntpd daemon by usi...

The vulnerability of the NTP synchronization protocol lies in its implementation, which is due to insufficient validation of input data. This allows attackers to trigger a service failure.

The vulnerability of the NTP synchronization protocol exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a service failure ntpd daemon shutdown using a specially crafted directive “mode”...

CVE-2021-36584

An issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function gprtpbuilderdotx3g function in ietf/rtppck3gpp.c, as demonstrated by MP4Box. This can cause a denial of service DOS...

UBUNTU-CVE-2021-36584

An issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function gprtpbuilderdotx3g function in ietf/rtppck3gpp.c, as demonstrated by MP4Box. This can cause a denial of service DOS...

[SECURITY] [DLA 2723-1] linuxptp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2723-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz July 31, 2021 https://wiki.debian.org/LTS -...

Fedora: Security Advisory for linuxptp (FEDORA-2021-a5b584004c)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: linuxptp-3.1.1-1.fc33

This software is an implementation of the Precision Time Protocol PTP according to IEEE standard 1588 for Linux. The dual design goals are to provi de a robust implementation of the standard and to use the most relevant and mode rn Application Programming Interfaces API offered by the Linux kerne...

[SECURITY] Fedora 34 Update: linuxptp-3.1.1-1.fc34

This software is an implementation of the Precision Time Protocol PTP according to IEEE standard 1588 for Linux. The dual design goals are to provi de a robust implementation of the standard and to use the most relevant and mode rn Application Programming Interfaces API offered by the Linux kerne...

[SECURITY] [DSA 4938-1] linuxptp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4938-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 13, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4938-1] linuxptp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4938-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 13, 2021 https://www.debian.org/security/faq -...

CentOS: Security Advisory for linuxptp (CESA-2021:2658)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

linuxptp security update

CentOS Errata and Security Advisory CESA-2021:2658 An update for linuxptp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

Important: Red Hat Security Advisory: linuxptp security update

An update for linuxptp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

linuxptp: missing length check of forwarded messages

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiali...

Important: Red Hat Security Advisory: linuxptp security update

An update for linuxptp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

linuxptp: missing length check of forwarded messages

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiali...

linuxptp security update

An update is available for linuxptp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The linuxptp packages provide Precision Time Protocol PTP implementation for...

RLSA-2021:2660 Important: linuxptp security update

The linuxptp packages provide Precision Time Protocol PTP implementation for Linux according to IEEE standard 1588 for Linux. The dual design goals are to provide a robust implementation of the standard and to use the most relevant and modern Application Programming Interfaces API offered by the...

UBUNTU-CVE-2021-3570

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiali...

ptp4l 缓冲区错误漏洞

ptp4l is an implementation of IEEE Standard 1588 for Linux for the Precision Time Protocol PTP. A buffer error vulnerability exists in ptp4l that stems from the fact that when ptp4l is run as a PTP transparent clock on a little-endian architecture, a remote attacker can send a carefully crafted...