PT-2015-7689 · Ntp+7 · Ntpd+8

Stephen Gray

·

Publicado

2015-12-31

·

Atualizado

2024-06-15

·

CVE-2015-7977

CVSS v3.1

5.9

Média

VetorAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ntpd versions 4.2.8p5 and earlier, 4.3.x prior to 4.3.90
Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference, via a ntpdc reslist command.
Recommendations For versions 4.2.8p5 and earlier, update to version 4.2.8p6 or later. For versions 4.3.x prior to 4.3.90, update to version 4.3.90 or later.

Exploit

Correção

DoS

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2017-2335
CESA-2016_0780
CESA-2016_2583
CVE-2015-7977
DLA-559-1
DSA-3629-1
MGASA-2016-0039
OPENSUSE-SU-2016_1292-1
OPENSUSE-SU-2024:10181-1
RHSA-2016:0780
RHSA-2016:2583
RHSA-2016_0780
RHSA-2016_2583
SUSE-SU-2016:1175-1
SUSE-SU-2016:1177-1
SUSE-SU-2016:1247-1
SUSE-SU-2016:1311-1
USN-3096-1

Produtos afetados

Alt Linux
Centos
Cisco Ios Xr
Cisco Nexus
Freebsd
Red Hat
Suse
Ubuntu
Ntpd