PT-2015-5444 · Ntp+7 · Ntpd+10

Miroslav Lichvar · Publicado 2014-12-24 · Atualizado 2024-06-15 · CVE-2015-1798

Positive Technologies (AI Summary)

CVSS v2.0

1.8

Baixa

Vetor base

AV:A/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ntpd versions 4.x through 4.2.8p1

Description The issue allows man-in-the-middle attackers to spoof packets by omitting the MAC, making it easier to launch attacks. This is due to the symmetric-key feature in the receive function requiring a correct MAC only if the MAC field has a nonzero length.

Recommendations For ntpd versions 4.x through 4.2.8p1, update to version 4.2.8p2 or later to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

ALT-PU-2014-2486

CESA-2015_1459

CESA-2015_2231

CVE-2015-1798

DLA-192-1

DSA-3223-1

HPSBUX03333

MGASA-2015-0152

OPENSUSE-SU-2024:10181-1

RHSA-2015:1459

RHSA-2015:2231

RHSA-2015_1459

RHSA-2015_2231

SUSE-SU-2015:0865-1

SUSE-SU-2015_0865-1

SUSE-SU-2016_1912-1

SUSE-SU-2016_2094-1

USN-2567-1

Produtos afetados

Alt Linux

Centos

Cisco Ios

Cisco Ios Xe

Cisco Ios Xr

Cisco Nexus

Hp-Ux

Red Hat

Suse

Ubuntu

Ntpd

Referências · 335

• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_nak_to_the_future.rb · Nota
• https://github.com/MacMiniVault/NTPUpdateSnowLeopard · Nota
• http://talosintel.com/reports/TALOS-2015-0062 · Nota
• https://suse.com/security/cve/CVE-2015-7848.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9296 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-7433 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1798 · Nota de Segurança
• https://lists.suse.com/pipermail/sle-security-updates/2015-May/001378.html · Nota
• https://security-tracker.debian.org/tracker/source-package/ntp · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-7977.html · Nota
• https://suse.com/security/cve/CVE-2015-7851.html · Nota
• https://bugzilla.suse.com/951351 · Nota
• https://bdu.fstec.ru/vul/2015-10236 · Nota de Segurança
• https://osv.dev/vulnerability/openSUSE-SU-2024:10181-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5195 · Nota de Segurança