PT-2017-17081 · Ntt+4 · Ntp+4
Publicado
2017-03-27
·
Atualizado
2024-06-15
·
CVE-2017-6458
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
NTP versions prior to 4.2.8p10
NTP versions 4.3.x prior to 4.3.94
Description
The issue is related to multiple buffer overflows in the ctl put* functions, allowing remote authenticated users to have an unspecified impact via a long variable. Additionally, a denial of service vulnerability exists, where a remote authenticated attacker could exploit this using a malformed mode configuration directive to cause the application to crash.
Recommendations
For NTP versions prior to 4.2.8p10, update to version 4.2.8p10 or later.
For NTP versions 4.3.x prior to 4.3.94, update to version 4.3.94 or later.
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Ibm Aix
Ntp
Suse
Ubuntu