PT-2016-5178 · Ntt+7 · Ntp+7

Yihan Lian

·

Publicado

2016-04-28

·

Atualizado

2024-06-15

·

CVE-2016-2518

CVSS v3.1

5.3

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p9 NTP versions 4.3.x prior to 4.3.92
Description The issue allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value. This is related to the MATCH ASSOC function.
Recommendations For NTP versions prior to 4.2.8p9, update to version 4.2.8p9 or later. For NTP versions 4.3.x prior to 4.3.92, update to version 4.3.92 or later.

Correção

DoS

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2017-2335
CESA-2016_1141
CVE-2016-2518
DLA-559-1
DSA-3629-1
MGASA-2016-0174
OPENSUSE-SU-2016_1329-1
OPENSUSE-SU-2024:10181-1
RHSA-2016:1141
RHSA-2016:1552
RHSA-2016_1141
SUSE-SU-2016:1278-1
SUSE-SU-2016:1291-1
SUSE-SU-2016:1471-1
SUSE-SU-2016:1568-1
USN-3096-1

Produtos afetados

Alt Linux
Centos
Cisco Nexus
Freebsd
Ntp
Red Hat
Suse
Ubuntu