PT-2015-7691 · Ntf+7 · Ntp+10

Aanchal Malhotra

·

Publicado

2015-12-31

·

Atualizado

2024-06-15

·

CVE-2015-7979

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions NTP versions 4.2.8p5 and earlier NTP versions 4.3.x before 4.3.90
Description The issue allows remote attackers to cause a denial of service by sending broadcast packets with invalid authentication to a broadcast client, resulting in a client-server association tear down.
Recommendations For NTP versions 4.2.8p5 and earlier, update to version 4.2.8p6 or later. For NTP versions 4.3.x before 4.3.90, update to version 4.3.90 or later.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

ALT-PU-2017-2335
CESA-2016_1141
CESA-2016_2583
CVE-2015-7979
DLA-559-1
DSA-3629-1
MGASA-2016-0039
OPENSUSE-SU-2016_1292-1
OPENSUSE-SU-2024:10181-1
RHSA-2016:1141
RHSA-2016:1552
RHSA-2016:2583
RHSA-2016_1141
RHSA-2016_2583
SUSE-SU-2016:1175-1
SUSE-SU-2016:1177-1
SUSE-SU-2016:1247-1
SUSE-SU-2016:1311-1
USN-3096-1

Produtos afetados

Alt Linux
Centos
Cisco Ios
Cisco Ios Xe
Cisco Ios Xr
Cisco Nexus
Freebsd
Ntp
Red Hat
Suse
Ubuntu