PT-2015-7687 · Ntt+5 · Ntp+6

Jonathan Gardner

·

Publicado

2015-12-31

·

Atualizado

2024-06-15

·

CVE-2015-7975

CVSS v3.1

6.2

Média

VetorAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p6 NTP versions 4.3.x prior to 4.3.90
Description The issue is related to the nextvar function, which does not properly validate the length of its input. This allows an attacker to cause a denial of service, resulting in an application crash.
Recommendations For NTP versions prior to 4.2.8p6, update to version 4.2.8p6 or later. For NTP versions 4.3.x prior to 4.3.90, update to version 4.3.90 or later.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2017-2335
CVE-2015-7975
OPENSUSE-SU-2016_1292-1
OPENSUSE-SU-2024:10181-1
SUSE-SU-2016:1175-1
SUSE-SU-2016:1177-1
SUSE-SU-2016:1247-1
SUSE-SU-2016:1311-1
USN-3096-1

Produtos afetados

Alt Linux
Cisco Ios Xr
Cisco Nexus
Freebsd
Ntp
Suse
Ubuntu