PT-2024-30187 · Linuxptp+1 · Linuxptp+1

Qiupy123 · Published 2024-09-23 · Updated 2024-09-30 · CVE-2024-42861

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions linuxptp versions 4.2 and earlier

Description The issue allows a remote attacker to cause a denial of service via a crafted Pdelay Req message to the time synchronization function. This can be exploited by sending a specifically crafted message, potentially disrupting the time synchronization functionality.

Recommendations For linuxptp versions 4.2 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

AZL-49731

AZL-49740

CVE-2024-42861

Affected Products

Debian

Linuxptp

References · 16

• 🔥 https://github.com/qiupy123/CVE-2024-42861 · Exploit
• https://osv.dev/vulnerability/AZL-49740 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42861 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-42861 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-49731 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-42861 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-42861 · Security Note
• https://osv.dev/vulnerability/CVE-2024-42861 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42861 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-42861 · Vendor Advisory
• https://lists.nwtime.org/sympa/arc/linuxptp-users/2024-09/msg00020.html · Note
• https://twitter.com/CVEnew/status/1838320343041347916 · Twitter Post
• https://lists.nwtime.org/sympa/arc/linuxptp-devel/2024-09/msg00080.html · Note
• https://t.me/cvedetector/6214 · Telegram Post
• https://bugzilla.redhat.com/show_bug.cgi?id=2314319 · Note