Lucene search
K

170 matches found

FreeBSD Advisory
FreeBSD Advisory
added 2018/03/07 12:0 a.m.22 views

FreeBSD-SA-18:02.ntp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-18:02.ntp Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities of ntp Category: contrib Module: ntp Announced: 2018-03-07 Credits: Network Time...

9.8CVSS6.8AI score0.34936EPSS
Exploits11
Fedora
Fedora
added 2017/11/01 12:14 a.m.16 views

[SECURITY] Fedora 26 Update: systemd-233-7.fc26

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

1.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2017/10/30 12:0 a.m.86 views

CentOS 6 : ntp (CESA-2017:3071)

An update for ntp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

7.8CVSS6.9AI score0.03516EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2017/10/27 12:0 a.m.29 views

RedHat Update for ntp RHSA-2017:3071-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.03516EPSS
Exploits0References2
Hacker One
Hacker One
added 2017/10/24 8:59 a.m.15 views

Tor: Cross-domain linkability when system time changed in Tor Browser

This report is inspired by 257942. That report uses languagechange event as an indicator for different tabs to link multiple visits to a single user. This report uses another trick to achieve the same thing. Malicious websites keeps reading Date.now inside a setInterval loop with a short interval...

6.6AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2017/09/20 12:0 a.m.100 views

RHEL 7 : kernel (RHSA-2017:2770)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2770 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: A race condition was found in the Linux kernel,...

7CVSS6.7AI score0.09416EPSS
Exploits3References4
RedHat Linux
RedHat Linux
added 2017/09/19 4:9 p.m.180 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.3 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7CVSS6.6AI score0.09416EPSS
Exploits3References2
Citrix
Citrix
added 2017/08/10 12:0 a.m.6 views

Citrix Hypervisor unable to sync to NTP server

Unable to sync to NTP server...

7AI score
Exploits0
Fedora
Fedora
added 2017/06/17 7:46 p.m.24 views

[SECURITY] Fedora 26 Update: systemd-233-4.fc26

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

7.5CVSS1.3AI score0.00913EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2017/02/06 6:16 a.m.1 views

ntp: Attack on interface selection

A flaw was found in the way ntpd running on a host with multiple network interfaces handled certain server responses. A remote attacker could use this flaw which would cause ntpd to not synchronize with the source...

4.3CVSS7.2AI score0.05213EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2017/01/26 12:0 a.m.265 views

Citrix XenServer Multiple Security Updates (CTX220112)

Several security issues have been identified within Citrix XenServer. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS6.3AI score0.36837EPSS
Exploits0References1
Citrix
Citrix
added 2017/01/02 12:0 a.m.5 views

How to Setup Time on XenServer Manually When There Is No NTP Server

This is a situation where you don't have an AD , DC ,DNS or an NTP server in the environment to point the servers for syncing time...

7AI score
Exploits0
Fedora
Fedora
added 2016/12/08 3:53 a.m.54 views

[SECURITY] Fedora 25 Update: ntp-4.2.6p5-43.fc25

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

7.5CVSS1.3AI score0.11683EPSS
Exploits2
Fedora
Fedora
added 2016/12/07 8:21 p.m.45 views

[SECURITY] Fedora 24 Update: ntp-4.2.6p5-43.fc24

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

7.5CVSS1.3AI score0.11683EPSS
Exploits2
CNVD
CNVD
added 2016/11/23 12:0 a.m.1 views

ntpd Denial of Service Vulnerability (CNVD-2016-11431)

Network Time Protocol NTP is a protocol used to synchronize a computer's time to its server or clock source e.g., quartz clock, GPS, etc.. Synchronizing a computer's clock to UTC ensures that data interactions in a network can proceed smoothly.NTPD Network Time Protocol daemon is an operating...

7.5CVSS6.9AI score0.11683EPSS
Exploits0References1
CNVD
CNVD
added 2016/11/23 12:0 a.m.1 views

ntpd broadcast mode replay defense denial of service vulnerability

Network Time Protocol NTP is a protocol used to synchronize a computer's time to its server or clock source e.g., quartz clock, GPS, etc.. Synchronizing a computer's clock to UTC ensures that data interactions in a network can proceed smoothly.NTPD Network Time Protocol daemon is an operating...

4.3CVSS6.8AI score0.05301EPSS
Exploits1References1
CNVD
CNVD
added 2016/11/23 12:0 a.m.1 views

ntpd Denial of Service Vulnerability (CNVD-2016-11426)

Network Time Protocol NTP is a protocol used to synchronize a computer's time to its server or clock source e.g., quartz clock, GPS, etc.. Synchronizing a computer's clock to UTC ensures that data interactions in a network can proceed smoothly.NTPD Network Time Protocol daemon is an operating...

4.3CVSS8.6AI score0.05213EPSS
Exploits0References1
CNVD
CNVD
added 2016/11/23 12:0 a.m.1 views

Local Denial of Service Vulnerability in ntpd

Network Time Protocol NTP is a protocol used to synchronize a computer's time to its server or clock source e.g., quartz clock, GPS, etc.. Synchronizing a computer's clock to UTC ensures that data interactions in a network can proceed smoothly.NTPD Network Time Protocol daemon is an operating...

5.3CVSS8.2AI score0.06848EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2016/08/12 12:0 a.m.38 views

FreeBSD : FreeBSD -- Multiple ntp vulnerabilities (7cfcea05-600a-11e6-a6c3-14dae9d210b8)

Multiple vulnerabilities have been discovered in the NTP suite : The fix for Sec 3007 in ntp-4.2.8p7 contained a bug that could cause ntpd to crash. CVE-2016-4957, Reported by Nicolas Edet of Cisco An attacker who knows the origin timestamp and can send a spoofed packet containing a CRYPTO-NAK to...

7.5CVSS6.7AI score0.59072EPSS
Exploits4References6
RedHat Linux
RedHat Linux
added 2016/08/03 7:43 a.m.1 views

ntp: crypto-NAK preemptable association denial of service

A denial of service flaw was found in the way NTP handled preemptable client associations. A remote attacker could send several crypto NAK packets to a victim client, each with a spoofed source address of an existing associated peer, preventing that client from synchronizing its time...

5.3CVSS7.1AI score0.03664EPSS
Exploits2References6
Rows per page
Query Builder