Lucene search

K
suseSuseSUSE-SU-2014:1686-1
HistoryDec 22, 2014 - 9:04 p.m.

Security update for ntp (critical)

2014-12-2221:04:50
lists.opensuse.org
13

0.966 High

EPSS

Percentile

99.5%

This ntp update fixes the following critical security issue:

   * A potential remote code execution problem was found inside ntpd. The
     functions crypto_recv() (when using autokey authentication) and
     ctl_putdata() where updated to avoid buffer overflows that could
     have been exploited. (CVE-2014-9295 / VU#852879)

Security Issues:

   * CVE-2014-9295
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9295">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9295</a>&gt;