PT-2015-6798 · Ntt+4 · Ntp+4

Martin Prpič · Publicado 2014-12-24 · Atualizado 2023-02-13 · CVE-2015-5195

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.7p112

Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, via a crafted statistics or filegen configuration command that is not enabled during compilation. This occurs when a statistics type that was not enabled during compilation is referenced by the statistics or filegen configuration command.

Recommendations For versions prior to 4.2.7p112, update to version 4.2.7p112 or later to resolve the issue. As a temporary workaround, consider restricting the use of statistics or filegen configuration commands until a patch is available. Avoid using statistics types that are not enabled during compilation in the affected configuration commands.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2014-2486

CESA-2016_0780

CESA-2016_2583

CVE-2015-5195

DLA-335-1

DSA-3388-1

MGASA-2015-0348

RHSA-2016:0780

RHSA-2016:2583

RHSA-2016_0780

RHSA-2016_2583

USN-2783-1

Produtos afetados

Alt Linux

Centos

Ntp

Red Hat

Ubuntu

Referências · 52

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_nak_to_the_future.rb · Exploit
• https://github.com/ntp-project/ntp/commit/52e977d79a0c4ace997e5c74af429844da2f27be · Correção
• http://debian.org/security/2015/dsa-3388 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2016-0780.html · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2015-0348.html · Nota de Segurança
• https://ubuntu.com/security/CVE-2015-5300 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-7691 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-7871 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2015-5195 · Nota de Segurança
• http://support.ntp.org/bin/view/Main/SecurityNotice#June_2015_NTP_Security_Vulnerabi · Nota
• https://www-01.ibm.com/support/docview.wss?uid=isg3T1024157 · Nota
• http://oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.html · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=16322 · Nota
• https://ubuntu.com/security/CVE-2015-5195 · Aviso do Fabricante