Ntp vulnerability

2009-12-0800:00:00

ubuntu.com

7.6 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.963 High

EPSS

Percentile

99.5%

JSON

Releases

Ubuntu 9.10
Ubuntu 9.04
Ubuntu 8.10
Ubuntu 8.04
Ubuntu 6.06

Packages

ntp -

Details

Robin Park and Dmitri Vinokurov discovered a logic error in ntpd. A remote
attacker could send a crafted NTP mode 7 packet with a spoofed IP address
of an affected server and cause a denial of service via CPU and disk
resource consumption.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchntp< 1:4.2.4p6+dfsg-1ubuntu5.1UNKNOWN
Ubuntu9.10noarchntpdate< 1:4.2.4p6+dfsg-1ubuntu5.1UNKNOWN
Ubuntu9.04noarchntp< 1:4.2.4p4+dfsg-7ubuntu5.2UNKNOWN
Ubuntu9.04noarchntpdate< 1:4.2.4p4+dfsg-7ubuntu5.2UNKNOWN
Ubuntu8.10noarchntp< 1:4.2.4p4+dfsg-6ubuntu2.4UNKNOWN
Ubuntu8.10noarchntpdate< 1:4.2.4p4+dfsg-6ubuntu2.4UNKNOWN
Ubuntu8.04noarchntp< 1:4.2.4p4+dfsg-3ubuntu2.3UNKNOWN
Ubuntu8.04noarchntpdate< 1:4.2.4p4+dfsg-3ubuntu2.3UNKNOWN
Ubuntu6.06noarchntp-server< 1:4.2.0a+stable-8.1ubuntu6.3UNKNOWN
Ubuntu6.06noarchntp< 1:4.2.0a+stable-8.1ubuntu6.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.10	noarch	ntp	< 1:4.2.4p6+dfsg-1ubuntu5.1	UNKNOWN
Ubuntu	9.10	noarch	ntpdate	< 1:4.2.4p6+dfsg-1ubuntu5.1	UNKNOWN
Ubuntu	9.04	noarch	ntp	< 1:4.2.4p4+dfsg-7ubuntu5.2	UNKNOWN
Ubuntu	9.04	noarch	ntpdate	< 1:4.2.4p4+dfsg-7ubuntu5.2	UNKNOWN
Ubuntu	8.10	noarch	ntp	< 1:4.2.4p4+dfsg-6ubuntu2.4	UNKNOWN
Ubuntu	8.10	noarch	ntpdate	< 1:4.2.4p4+dfsg-6ubuntu2.4	UNKNOWN
Ubuntu	8.04	noarch	ntp	< 1:4.2.4p4+dfsg-3ubuntu2.3	UNKNOWN
Ubuntu	8.04	noarch	ntpdate	< 1:4.2.4p4+dfsg-3ubuntu2.3	UNKNOWN
Ubuntu	6.06	noarch	ntp-server	< 1:4.2.0a+stable-8.1ubuntu6.3	UNKNOWN
Ubuntu	6.06	noarch	ntp	< 1:4.2.0a+stable-8.1ubuntu6.3	UNKNOWN