ptp4l 缓冲区错误漏洞

ptp4l is an implementation of IEEE Standard 1588 for Linux for the Precision Time Protocol PTP. A buffer error vulnerability exists in ptp4l, which stems from a lack of length checking when forwarding PTP messages between ports, and can lead to information leakage, crashes, or potentially remote...

The vulnerability of the ntpkeygen component in the NTPsec network time protocol allows a attacker to perform a type of “man-in-the-middle” attack.

The vulnerability of the ntpkeygen component in the NTPsec network time protocol implementation is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to perform a “man-in-the-middle” attack between NTP clients a...

Fedora: Security Advisory for ntpsec (FEDORA-2021-3ffc890685)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: ntpsec-1.2.1-3.fc34

NTPsec is a more secure and improved implementation of the Network Time Protocol derived from the original NTP project...

DEBIAN-CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

Vulnerabilities in Siemens SIMATIC NET

Siemens has identified a number of vulnerabilities in the SIMATIC NET CP 443-1 OPC UA Communication Processor for S7 systems. The vulnerabilities are all located in the NTP implementation and enable an unauthenticated malicious person to able to cause a Denial-of-Service, or potentially execute...

RFNTPS vulnerable to OS command injection

Overview RFNTPS provided by NIPPON ANTENNA Co.,Ltd. is a terrestrial reception type NTP server. RFNTPS contains an OS command injection vulnerability CWE-78. Tomoomi Iwata of NEC Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

Qualcomm 组件缓冲区错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. An intrinsic part that provides the functionality of Qualcomm devices. A security vulnerability exists in the Qualcomm Component that stems from a buffer over-read when decompressing RTCP packets, where we may read additional byt...

The vulnerability of the Chrony daemon in the implementation of the Network Time Protocol (NTP) allows a attacker to cause a service failure.

The vulnerability of the Chrony daemon in the implementation of the Network Time Protocol NTP is related to an incorrect definition of the link before accessing the file in the /var/run/chrony directory. Exploiting this vulnerability could allow a attacker to cause a service failure by using a...

USN-4229-2 ntp vulnerability

USN-4229-1 fixed a vulnerability in NTP. This update provides the corresponding update for Ubuntu 18.04 ESM. Original advisory details: It was discovered that ntpq and ntpdc incorrectly handled some arguments. An attacker could possibly use this issue to cause ntpq or ntpdc to crash, execute...

ALPINE-CVE-2021-26712

Incorrect access controls in ressrtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to prematurely terminate secure calls by replaying SRTP packets...

The vulnerability in the implementation of the WebRTC technology for browser-based applications by Mozilla Firefox and Firefox-ESR allows a attacker to induce a service failure.

The vulnerability of the WebRTC streaming data transmission technology in Mozilla Firefox and Firefox-ESR implementations is related to an inappropriate type of payload type in the RTP packets sent. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

NICER Protocol Deep Dive: Internet Exposure of NTP

Welcome to the NICER Protocol Deep Dive blog series! When we started researching what all was out on the internet way back in January, we had no idea we'd end up with a hefty, 137-page tome of a research report. The sheer length of such a thing might put off folks who might otherwise learn a thin...

The vulnerability of the NTP network protocol, related to errors in data processing, allows attackers to compromise the integrity of data.

The vulnerability of the NTP network protocol is related to errors in data processing. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

The vulnerability in the ntpd implementation of the NTP synchronization protocol, related to the swapping of the zero pointer, allows a perpetrator to cause a service failure.

The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol is related to the swapping of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

Beetel router 777VR1 cross-site scripting vulnerability

Beetel 777VR1 is a router from Beetel. A cross-site scripting vulnerability exists in the Beetel router 777VR1, which is caused by an NTP server name in system time and a "keyword" in the URL filter...

Digisol Systems DG-HR3400 Cross-Site Scripting Vulnerability

Digisol Systems DG-HR3400 is a wireless router from Digisol Systems, India. The Digisol DG-HR3400 suffers from a cross-site scripting vulnerability that originates from the NTP server name in the system time and the "keyword" in the URL filter...

Virtuozzo 6 : ntp / ntp-doc / ntp-perl / ntpdate (VZLSA-2018-3854)

An update for ntp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

openGauss: Configuring an NTP Server

The Network Time Protocol NTP is used to synchronize time between clients and servers on the network. By configuring an NTP, you can synchronize the clock of a PC to the Coordinated Universal Time UTC and synchronize system clocks of multiple OSs. Copyright C 2020 Greenbone Networks GmbH Some tex...

GaussDB Kernel: Configuring an NTP Server

The Network Time Protocol NTP is used to synchronize time between clients and servers on the network. By configuring an NTP, you can synchronize the clock of a PC to the Coordinated Universal Time UTC and synchronize system clocks of multiple OSs. Copyright C 2020 Greenbone Networks GmbH Some tex...