Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:16918
HistoryMay 02, 2019 - 5:29 a.m.

Denial Of Service (DoS)

2019-05-0205:29:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

ntp is vulnerable to denial of service. The fix for CVE-2014-9750 was incomplete which resulted in incorrect value length checks in ntp_crypto.c. A packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a specially crafted NTP packet to crash ntpd.

Related

prion 6
debiancve 4
cve 6
ubuntucve 4
f5 4
nessus 49
veracode 3
osv 4
ibm 16
openvas 28
amazon 1
redhat 4
centos 4
debian 2
slackware 1
aix 1
fedora 3
mageia 1
oraclelinux 3
freebsd_advisory 1
archlinux 1
arista 1
freebsd 1
securityvulns 2
cisco 1
symantec 1
ubuntu 1
suse 4
gentoo 1
ics 1
prion
prion
Code injection
2017-08-07 20:29:00
Authentication flaw
2015-10-06 01:59:00
Code injection
2017-08-07 20:29:00
debiancve
debiancve
CVE-2015-7691
2017-08-07 20:29:00
CVE-2014-9750
2015-10-06 01:59:00
CVE-2015-7702
2017-08-07 20:29:00
cve
cve
CVE-2015-7691
2017-08-07 20:29:00
CVE-2014-9750
2015-10-06 01:59:00
CVE-2015-7702
2017-08-07 20:29:00
ubuntucve
ubuntucve
CVE-2015-7691
2015-10-22 00:00:00
CVE-2015-7702
2015-10-22 00:00:00
CVE-2015-7692
2015-10-22 00:00:00
f5
f5
K17530 : NTP vulnerabilities CVE-2015-7691, CVE-2015-7692, and CVE-2015-7702
2015-11-05 00:00:00
K16392 : NTP vulnerability CVE-2014-9750
2015-11-07 00:00:00
SOL16392 - NTP vulnerability CVE-2014-9750
2015-04-09 00:00:00
nessus
nessus
F5 Networks BIG-IP : NTP vulnerabilities (K17530)
2015-11-06 00:00:00
Rockwell Automation Stratix Denial of Service AutoKey Malicious Message (CVE-2015-7691)
2023-11-15 00:00:00
Network Time Protocol Daemon (ntpd) 3.x / 4.x < 4.2.8p5 Denial Of Service Vulnerability
2019-01-22 00:00:00
veracode
veracode
Sensitive Information Leak
2019-05-02 05:41:07
Denial Of Service (DoS)
2019-05-02 05:29:36
Denial Of Service (DoS)
2019-05-02 05:29:36
osv
osv
ntp - security update
2015-02-05 00:00:00
ntp - incomplete fix
2015-02-05 00:00:00
ntp - security update
2015-11-01 00:00:00
ibm
ibm
Security Bulletin: IBM Pure Power Integrated Manager (PPIM) is affected by vulnerabilities in ntp (CVE-2014-9750, CVE-2014-9751)
2018-06-18 01:30:30
Security Bulletin: Multiple Security Vulnerabilities affecting IBM Netezza Host Management
2019-10-18 03:10:29
Security Bulletin: Vulnerabilities in NTP affect IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru Firmware, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module and QLogic Virtual Fabric Extension Module for IBM BladeCenter
2023-04-14 14:32:25
openvas
openvas
Debian: Security Advisory (DSA-3154-2)
2015-02-04 00:00:00
NTP.org 'ntpd' Multiple Vulnerabilities
2017-01-05 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-607)
2015-11-08 00:00:00
amazon
amazon
Important: ntp
2015-10-27 16:42:00
redhat
redhat
(RHSA-2016:0780) Moderate: ntp security and bug fix update
2016-05-10 06:42:20
(RHSA-2016:2583) Moderate: ntp security and bug fix update
2016-11-03 06:07:15
(RHSA-2015:1459) Moderate: ntp security, bug fix, and enhancement update
2015-07-22 00:00:00
centos
centos
ntp, ntpdate security update
2016-05-16 10:19:19
ntp, ntpdate, sntp security update
2016-11-25 16:00:55
ntp, ntpdate security update
2015-07-26 14:13:05
debian
debian
[SECURITY] [DLA 335-1] ntp security update
2015-10-28 20:45:05
[SECURITY] [DSA 3388-1] ntp security update
2015-11-01 22:20:55
slackware
slackware
[slackware-security] ntp
2015-10-29 22:49:05
aix
aix
Vulnerabilities in NTP affect AIX,Vulnerabilities in NTP affect VIOS
2016-01-21 09:13:20
fedora
fedora
[SECURITY] Fedora 23 Update: ntp-4.2.6p5-34.fc23
2015-11-02 18:55:43
[SECURITY] Fedora 21 Update: ntp-4.2.6p5-34.fc21
2015-11-04 22:51:44
[SECURITY] Fedora 22 Update: ntp-4.2.6p5-36.fc22
2016-02-21 02:33:52
mageia
mageia
Updated ntp packages fixes security vulnerabilities
2015-10-26 00:50:36
oraclelinux
oraclelinux
ntp security, bug fix, and enhancement update
2015-11-23 00:00:00
ntp security and bug fix update
2016-05-12 00:00:00
ntp security and bug fix update
2016-11-09 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:25.ntp
2015-10-26 00:00:00
archlinux
archlinux
ntp: multiple issues
2015-10-22 00:00:00
arista
arista
Security Advisory 0016
2015-11-04 00:00:00
freebsd
freebsd
ntp -- 13 low- and medium-severity vulnerabilities
2015-10-21 00:00:00
securityvulns
securityvulns
ntp multiple security vulnerabilities
2015-11-01 00:00:00
[USN-2783-1] NTP vulnerabilities
2015-11-01 00:00:00
cisco
cisco
Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015
2015-10-21 23:00:00
symantec
symantec
SA103 : October 2015 NTP Security Vulnerabilities
2015-11-24 08:00:00
ubuntu
ubuntu
NTP vulnerabilities
2015-10-27 00:00:00
suse
suse
Security update for ntp (important)
2016-05-06 13:07:50
Security update for ntp (important)
2016-05-17 15:09:17
Security update for ntp (important)
2016-07-29 19:08:48
gentoo
gentoo
NTP: Multiple vulnerabilities
2016-07-20 00:00:00
ics
ics
Rockwell Automation Stratix 5900
2017-05-10 12:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON
Related for VERACODE:16918
prion6debiancve4cve6ubuntucve4f54nessus49veracode3osv4ibm16openvas28amazon1redhat4centos4debian2slackware1aix1fedora3mageia1oraclelinux3freebsd_advisory1archlinux1arista1freebsd1securityvulns2cisco1symantec1ubuntu1suse4gentoo1ics1