Lucene search
VMwareVMSA-2014-0002.4HistoryMar 11, 2014 - 12:00 a.m.
VMware vSphere updates to third party libraries
2014-03-1100:00:00
www.vmware.com
23
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.967 High
EPSS
Percentile
99.6%
a. DDoS vulnerability in NTP third party libraries
The NTP daemon has a DDoS vulnerability in the handling of the “monlist” command. An attacker may send a forged request to a vulnerable NTP server resulting in an amplified response to the intended target of the DDoS attack.MitigationMitigation for this issue is documented in VMware Knowledge Base article 2070193. This article also documents when vSphere products are affected.The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2013-5211 to this issue.Column 4 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available.
Related
vmware
vmware
VMware vSphere updates to third party libraries
2014-03-11 00:00:00
openvas
openvas
VMSA-2014-0002 VMware vSphere updates to third party libraries
2014-03-12 00:00:00
VMSA-2014-0002 VMware vSphere updates to third party libraries
2014-03-12 00:00:00
nessus
nessus
VMSA-2014-0002 : VMware vSphere updates to third-party libraries
2014-03-12 00:00:00
ESXi 5.5 < Build 1623387 Multiple Vulnerabilities (remote check)
2015-05-22 00:00:00
VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2014-0002)
2015-12-30 00:00:00
ibm
ibm
oraclelinux
oraclelinux
glibc security and bug fix update
2013-10-08 00:00:00
ntp security update
2016-09-09 00:00:00
ntp security update
2016-09-09 00:00:00
threatpost
threatpost
Volume of NTP Amplification Attacks Getting Louder
2014-04-29 13:03:29
NTP Amplification Blamed for 400 Gbps DDoS Attack
2014-02-11 12:21:35
PointDNS Recovers from Massive DDoS Attack
2014-05-12 15:35:26
checkpoint_advisories
checkpoint_advisories
NTP Servers Monlist Command Denial of Service (CVE-2013-5211)
2014-01-19 00:00:00
suse
suse
DDoS reflection attacks in ntp
2014-01-20 17:05:38
Security update for glibc (important)
2014-09-12 06:04:16
Security update for glibc (important)
2014-09-15 19:04:18
zdt
zdt
NTP ntpd monlist Query Reflection - Denial of Service
2014-04-29 00:00:00
securityvulns
securityvulns
ntp traffic amplification
2014-01-14 00:00:00
[security bulletin] HPSBUX02960 SSRT101419 rev.1 - HP-UX Running NTP, Remote Denial of Service (DoS)
2014-01-14 00:00:00
TA14-013A: NTP Amplification Attacks Using CVE-2013-5211
2014-01-14 00:00:00
freebsd
freebsd
ntpd DRDoS / Amplification Attack using ntpdc monlist command
2014-01-01 00:00:00
cert
cert
NTP can be abused to amplify denial-of-service attack traffic
2014-01-10 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:00:29
ubuntucve
ubuntucve
CVE-2013-4332
2013-10-09 00:00:00
CVE-2013-5211
2014-01-02 00:00:00
redhat
redhat
(RHSA-2013:1411) Moderate: glibc security and bug fix update
2013-10-08 00:00:00
(RHSA-2013:1605) Moderate: glibc security, bug fix, and enhancement update
2013-11-21 00:00:00
(RHSA-2013:1527) Important: rhev-hypervisor6 security and bug fix update
2013-11-21 00:00:00
cve
cve
CVE-2013-4332
2013-10-09 22:55:00
CVE-2013-5211
2014-01-02 14:59:00
exploitpack
exploitpack
NTP ntpd monlist Query Reflection - Denial of Service
2014-04-28 00:00:00
packetstorm
packetstorm
NTP Amplification Denial Of Service Tool
2014-07-16 00:00:00
prion
prion
Integer overflow
2013-10-09 22:55:00
Security feature bypass
2014-01-02 14:59:00
centos
centos
glibc, nscd security update
2013-10-08 20:20:03
glibc, nscd security update
2013-11-26 13:31:38
debiancve
debiancve
CVE-2013-4332
2013-10-09 22:55:00
CVE-2013-5211
2014-01-02 14:59:00
f5
f5
SOL15154 - NTP vulnerability CVE-2013-5211
2014-04-10 00:00:00
K15154 : NTP vulnerability CVE-2013-5211
2014-04-10 00:00:00
amazon
amazon
mageia
mageia
Updated ntp packages work around security vulnerability
2014-01-31 20:44:56
Updated glibc package fixes security vulnerabilities
2013-11-22 22:44:49
aix
aix
checkpoint_security
checkpoint_security
Blocking NTP access on Gaia OS / IPSO OS (CVE-2013-5211)
2014-03-01 22:00:00
fortinet
fortinet
FortiAnalyzer could potentially be used in NTP amplification attacks
2020-06-22 00:00:00
thn
thn
metasploit
metasploit
NTP Monitor List Scanner
2010-01-27 23:25:17
ics
ics
NTP Reflection Attack
2018-09-06 12:00:00
gentoo
gentoo
NTP: Traffic amplification
2014-01-16 00:00:00
GNU C Library: Multiple vulnerabilities
2015-03-08 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:02.ntpd
2014-01-14 00:00:00
slackware
slackware
ntp
2014-02-13 16:38:35
exploitdb
exploitdb
NTP ntpd monlist Query Reflection - Denial of Service
2014-04-28 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: glibc-2.18-9.fc20
2013-09-26 06:13:02
[SECURITY] Fedora 19 Update: glibc-2.17-18.fc19
2013-09-28 00:07:09
[SECURITY] Fedora 19 Update: glibc-2.17-21.fc19
2014-10-19 13:24:18
altlinux
altlinux
Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt8.M60P.3
2015-12-23 00:00:00
Security fix for the ALT Linux 7 package glibc version 6:2.17-alt6
2014-01-11 00:00:00
Security fix for the ALT Linux 9 package glibc version 6:2.17-alt6
2014-01-11 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2013-10-21 00:00:00
debian
debian
[SECURITY] [DLA 165-1] eglibc security update
2015-03-06 15:39:53
osv
osv
eglibc - security update
2015-03-06 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.967 High
EPSS
Percentile
99.6%
Related for VMSA-2014-0002.4