Lucene search

K
suseSuseSUSE-SU-2014:1686-3
HistoryDec 24, 2014 - 7:04 p.m.

Security update for ntp (critical)

2014-12-2419:04:44
lists.opensuse.org
17

0.966 High

EPSS

Percentile

99.5%

This ntp update fixes the following critical security issue:

   * A potential remote code execution problem was found inside ntpd. The
     functions crypto_recv() (when using autokey authentication) and
     ctl_putdata() where updated to avoid buffer overflows that could
     have been exploited. (CVE-2014-9295 / VU#852879)

Security Issues:

   * CVE-2014-9295
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9295">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9295</a>&gt;