Security Bulletin: Security Vulnerabilities in Network Time Protocol Daemon affect Intel Manycore Platform Software Stack for use on Intel Xeon Phi 3120A, Intel Xeon Phi 5110P, Intel Xeon Phi 7120A, and Intel Xeon Phi 7120P PCI-Express add-in cards

Summary Security Vulnerabilities in Network Time Protocal Daemon affects the Intel Manycore Platform Software Stack for use on the Intel Xeon Phi PCI-Express add-in cards. Vulnerability Details Abstract Security Vulnerabilities in Network Time Protocal Daemon affects the Intel Manycore Platform...

The vulnerability of the decodearr function in the NTP synchronization monitoring program allows a hacker to execute arbitrary code.

The vulnerability of the decodearr function in the NTP synchronization monitoring program is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code by using a specially created array in response to an ntpq request...

The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol, related to key management errors, allows a perpetrator to compromise data integrity.

The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol is related to key management errors. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of the protected information...

The vulnerability of the ntpd daemon, which implements the NTP synchronization protocol, is related to errors in processing input data. This allows a perpetrator to cause a service failure.

The vulnerability of the ntpd daemon, which implements the NTP synchronization protocol, is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending specially crafted packets...

NTPsec Out-of-Bounds Write Vulnerability

NTPsec is an implementation of the Network Time Protocol. An out-of-bounds write vulnerability exists in versions of NTPsec prior to 1.1.3, which can be exploited by an attacker to cause a denial of service by sending a malformed config request...

DEBIAN-CVE-2019-6444

An issue was discovered in NTPsec before 1.1.3. processcontrol in ntpcontrol.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl in ntpd...

UBUNTU-CVE-2019-6443

An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctlgetitem, there is a stack-based buffer over-read in readsysvars in ntpcontrol.c in ntpd...

UBUNTU-CVE-2019-6445

An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntpcontrol.c, related to ctlgetitem...

NTPsec Null Pointer Dereference Vulnerability

NTPsec is an implementation of the Network Time Protocol. A null pointer dereference vulnerability exists in the ntpcontrol.c file in versions of NTPsec prior to 1.1.3, which can be exploited by an attacker to cause a denial of service...

NTPsec 1.1.2 - ntp_control Out-of-Bounds Read (PoC)

NTPsec 1.1.2 - ntpcontrol Out-of-Bounds Read PoC !/usr/bin/env python Exploit Title: ntpsec 1.1.2 OOB read Proof of concept Bug Discovery: Magnus Klaaborg Stubman @magnusstubman Exploit Author: Magnus Klaaborg Stubman @magnusstubman Website: https://dumpco.re/bugs/ntpsec-oobread2 Vendor Homepage:...

NTPsec Buffer Overflow Vulnerability

NTPsec is an implementation of the Network Time Protocol. A stack buffer overflow vulnerability exists in the readsysvars of the ntpcontrol.c file of ntpd in versions prior to NTPsec 1.1.3, which can be exploited by an attacker to cause a denial of service...

NTPsec 1.1.2 config Out-Of-Bounds Write

!/usr/bin/env python Exploit Title: ntpsec 1.1.2 authenticated out of bounds write proof of concept DoS Bug Discovery: Magnus Klaaborg Stubman @magnusstubman Exploit Author: Magnus Klaaborg Stubman @magnusstubman Website: https://dumpco.re/bugs/ntpsec-authed-oobwrite Vendor Homepage:...

NTPsec 1.1.2 - 'config' (Authenticated) Out-of-Bounds Write Denial of Service (PoC)

!/usr/bin/env python Exploit Title: ntpsec 1.1.2 authenticated out of bounds write proof of concept DoS Bug Discovery: Magnus Klaaborg Stubman @magnusstubman Exploit Author: Magnus Klaaborg Stubman @magnusstubman Website: https://dumpco.re/bugs/ntpsec-authed-oobwrite Vendor Homepage:...

NTPsec 1.1.2 - 'ctl_getitem' Out-of-Bounds Read (PoC)

!/usr/bin/env python Exploit Title: ntpsec 1.1.2 OOB read Proof of concept Bug Discovery: Magnus Klaaborg Stubman @magnusstubman Exploit Author: Magnus Klaaborg Stubman @magnusstubman Website: https://dumpco.re/bugs/ntpsec-oobread1 Vendor Homepage: https://ntpsec.org/ Software Link:...

Network Time Protocol ntpq decodearr Stack-based Buffer Overflow (CVE-2018-7183)

A buffer overflow vulnerability has been discovered in the monitoring and control program ntpq of Network Time Protocol daemon. A successful attack would result in arbitrary code execution in the security context of the user...

CVE-2018-6344

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to...

PT-2018-17492 · Whatsapp · Whatsapp For Ios +2

Name of the Vulnerable Software and Affected Versions: WhatsApp for Android versions prior to 2.18.293 WhatsApp for iOS versions prior to 2.18.93 WhatsApp for Windows Phone versions prior to 2.18.172 Description: A heap corruption issue can occur in WhatsApp due to a malformed RTP packet being se...

The vulnerability of the NTP synchronization protocol lies in the insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the NTP synchronization protocol lies in insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted packets...

CentOS Update for ntp CESA-2018:3854 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 6 : ntp (CESA-2018:3854)

An update for ntp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...