PT-2015-4380 · Ntp+3 · Ntp+3

Publicado 2015-02-05 · Atualizado 2020-06-18 · CVE-2014-9750

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p1

Description The issue allows remote attackers to obtain sensitive information from process memory or cause a denial of service (daemon crash) via a packet containing an extension field with an invalid value for the length of its value field, when Autokey Authentication is enabled.

Recommendations For versions prior to 4.2.8p1, update to version 4.2.8p1 or later to resolve the issue. As a temporary workaround, consider disabling Autokey Authentication until a patch is available. Restrict access to the ntpd service to minimize the risk of exploitation.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2017-2335

CESA-2015_1459

CESA-2015_2231

CVE-2014-9750

DLA-149-1

DSA-3154-1

DSA-3154-2

DSA-3388-1

RHSA-2015:1459

RHSA-2015:2231

RHSA-2015_1459

RHSA-2015_2231

Produtos afetados

Alt Linux

Centos

Ntp

Red Hat

Referências · 120

• 🔥 https://github.com/opsxcq/exploit-CVE-2016-7434 · Exploit
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_nak_to_the_future.rb · Nota
• http://talosintel.com/reports/TALOS-2015-0062 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7974 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9310 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2014-9297 · Nota
• https://access.redhat.com/security/cve/CVE-2015-1798 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7705 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6463 · Nota de Segurança
• http://talosintel.com/reports/TALOS-2016-0071 · Nota
• http://securityfocus.com/bid/72583 · Nota
• https://security-tracker.debian.org/tracker/source-package/ntp · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2517 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5195 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2017-2335 · Aviso do Fabricante