PT-2015-4381 · Ntp+2 · Ntp+2

Publicado 2015-02-05 · Atualizado 2021-09-08 · CVE-2014-9751

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ntp versions 4.x before 4.2.8p1

Description The issue arises from the read network packet function in ntpd not properly determining whether a source IP address is an IPv6 loopback address. This makes it easier for remote attackers to spoof restricted packets and read or write to the runtime state by sending a packet from the ::1 address to the ntpd machine's network interface.

Recommendations For ntp versions 4.x before 4.2.8p1, update to version 4.2.8p1 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CESA-2015_1459

CESA-2015_2231

CVE-2014-9751

DLA-149-1

DSA-3154-1

DSA-3388-1

RHSA-2015:1459

RHSA-2015:2231

RHSA-2015_1459

RHSA-2015_2231

Produtos afetados

Centos

Red Hat

Ntp

Referências · 67

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_nak_to_the_future.rb · Nota
• http://talosintel.com/reports/TALOS-2015-0062 · Nota
• https://access.redhat.com/security/cve/CVE-2014-9297 · Nota
• https://access.redhat.com/security/cve/CVE-2015-1798 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1798 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5194 · Nota de Segurança
• https://security-tracker.debian.org/tracker/source-package/ntp · Aviso do Fabricante
• http://support.ntp.org/bin/view/Main/SecurityNotice#December_2014_NTP_Security_Vulne · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2014-9751 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-3388-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7703 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5195 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9751 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2015:1459 · Nota
• https://access.redhat.com/security/cve/CVE-2014-9751 · Nota