PT-2016-6190 · Ntf+3 · Ntp+3

Nicolas Edet · Publicado 2016-06-13 · Atualizado 2024-06-15 · CVE-2016-4957

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p8

Description The issue allows remote attackers to cause a denial of service, resulting in the daemon crashing via a crypto-NAK packet. This problem exists due to an incorrect fix for a previous issue.

Recommendations For versions prior to 4.2.8p8, update to version 4.2.8p8 or later to resolve the issue.

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2016-1711

CVE-2016-4957

OPENSUSE-SU-2016_1583-1

OPENSUSE-SU-2016_1636-1

OPENSUSE-SU-2024:10181-1

SUSE-SU-2016:1563-1

SUSE-SU-2016:1568-1

SUSE-SU-2016:1584-1

SUSE-SU-2016:1602-1

Produtos afetados

Alt Linux

Freebsd

Ntp

Suse

Referências · 106

• https://security.gentoo.org/glsa/201607-15 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-1548 · Nota
• https://suse.com/security/cve/CVE-2016-7433 · Nota
• https://suse.com/security/cve/CVE-2015-7692 · Nota
• https://suse.com/security/cve/CVE-2016-1547 · Nota
• https://bugzilla.suse.com/977455 · Nota
• https://suse.com/security/cve/CVE-2015-7704 · Nota
• https://bugzilla.suse.com/979981 · Nota
• https://suse.com/security/cve/CVE-2016-1549 · Nota
• https://suse.com/security/cve/CVE-2015-7848 · Nota
• https://suse.com/security/cve/CVE-2016-2516 · Nota
• https://suse.com/security/cve/CVE-2016-9311 · Nota
• https://bugzilla.suse.com/977459 · Nota
• https://suse.com/security/cve/CVE-2016-7426 · Nota
• https://suse.com/security/cve/CVE-2015-7853 · Nota