Veracode Vulnerability DatabaseVERACODE:18169Denial Of Service (DoS)
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
NTP is vulnerable to denial of service attacks. A remote, unauthenticated attacker can send a specially crafted control mode packet to set and unset ntpd traps to obtain potentially sensitive information or conduct denial of service amplification attacks.
References
nwtime.org/ntp428p9_release/
rhn.redhat.com/errata/RHSA-2017-0252.html
support.ntp.org/bin/view/Main/NtpBug3118
support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
www.securityfocus.com/bid/94452
www.securitytracker.com/id/1037354
access.redhat.com/errata/RHSA-2017:0252
access.redhat.com/security/updates/classification/#moderate
bto.bluecoat.com/security-advisory/sa139
h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us
security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03799en_us
usn.ubuntu.com/3707-2/
www.kb.cert.org/vuls/id/633847
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P