PT-2015-4380 · Ntp+3 · Ntp+3

Published 2015-02-05 · Updated 2020-06-18 · CVE-2014-9750

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p1

Description The issue allows remote attackers to obtain sensitive information from process memory or cause a denial of service (daemon crash) via a packet containing an extension field with an invalid value for the length of its value field, when Autokey Authentication is enabled.

Recommendations For versions prior to 4.2.8p1, update to version 4.2.8p1 or later to resolve the issue. As a temporary workaround, consider disabling Autokey Authentication until a patch is available. Restrict access to the ntpd service to minimize the risk of exploitation.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2017-2335

CESA-2015_1459

CESA-2015_2231

CVE-2014-9750

DLA-149-1

DSA-3154-1

DSA-3154-2

DSA-3388-1

RHSA-2015:1459

RHSA-2015:2231

RHSA-2015_1459

RHSA-2015_2231

Affected Products

Alt Linux

Centos

Ntp

Red Hat

References · 120

• 🔥 https://github.com/opsxcq/exploit-CVE-2016-7434 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7974 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9310 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7705 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6463 · Security Note
• https://security-tracker.debian.org/tracker/source-package/ntp · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2517 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5195 · Security Note
• https://errata.altlinux.org/ALT-PU-2017-2335 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4955 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1184573 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7851 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7433 · Security Note
• https://osv.dev/vulnerability/DSA-3154-2 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3154-1 · Vendor Advisory