PT-2015-7587 · Ntf+6 · Ntp+8

Aanchal Malhotra

+3

·

Publicado

2015-10-21

·

Atualizado

2025-01-14

·

CVE-2015-7704

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions NTP versions 4.x before 4.2.8p4 NTP versions 4.3.x before 4.3.77
Description The issue allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.
Recommendations For NTP versions 4.x before 4.2.8p4, update to version 4.2.8p4 or later. For NTP versions 4.3.x before 4.3.77, update to version 4.3.77 or later.

Exploit

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2017-2335
CESA-2015_1930
CVE-2015-7704
DLA-335-1
DSA-3388-1
MGASA-2015-0413
OPENSUSE-SU-2016_1329-1
OPENSUSE-SU-2024:10181-1
RHSA-2015:1930
RHSA-2015:2520
RHSA-2015_1930
SUSE-SU-2015:2058-1
SUSE-SU-2016:1247-1
SUSE-SU-2016:1278-1
SUSE-SU-2016:1291-1
SUSE-SU-2016:1311-1
SUSE-SU-2016:1471-1
SUSE-SU-2016:1568-1
SUSE-SU-2016_1278-1
SUSE-SU-2016_1291-1
SUSE-SU-2016_1471-1
SUSE-SU-2016_1568-1
USN-2783-1

Produtos afetados

Alt Linux
Centos
Cisco Ios
Cisco Ios Xe
Cisco Nexus
Ntp
Red Hat
Suse
Ubuntu