Veracode Vulnerability DatabaseVERACODE:18170Denial Of Service (DoS)
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
NTP is vulnerable to denial of service attacks. a remote, unauthenticated attacker can send a specially crafted packet to trigger a null pointer dereference and cause the ntpd daemon to crash causing denial of service conditions.
References
nwtime.org/ntp428p9_release/
rhn.redhat.com/errata/RHSA-2017-0252.html
support.ntp.org/bin/view/Main/NtpBug3119
support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
www.securityfocus.com/bid/94444
www.securitytracker.com/id/1037354
access.redhat.com/errata/RHSA-2017:0252
access.redhat.com/security/updates/classification/#moderate
bto.bluecoat.com/security-advisory/sa139
h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us
security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03799en_us
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03885en_us
usn.ubuntu.com/3707-2/
www.kb.cert.org/vuls/id/633847
Related
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C