ntp ntp 4.3.1 vulnerabilities and exploits

(subscribe to this query)

ntpd in NTP prior to 4.2.8p7 and 4.3.x prior to 4.3.92 allows remote malicious users to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value.

Ntp Ntp Ntp Ntp 4.3.0 Ntp Ntp 4.3.1 Ntp Ntp 4.3.2 Ntp Ntp 4.3.3 Ntp Ntp 4.3.4 Ntp Ntp 4.3.5 Ntp Ntp 4.3.6 Ntp Ntp 4.3.7 Ntp Ntp 4.3.8 Ntp Ntp 4.3.9 Ntp Ntp 4.3.10

The ntpq saveconfig command in NTP 4.1.2, 4.2.x prior to 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows malicious users to cause unspecified impact via a crafted filename.

Ntp Ntp 4.1.2 Ntp Ntp Ntp Ntp 4.3.0 Ntp Ntp 4.3.1 Ntp Ntp 4.3.2 Ntp Ntp 4.3.3 Ntp Ntp 4.3.4 Ntp Ntp 4.3.5 Ntp Ntp 4.3.6 Ntp Ntp 4.3.7 Ntp Ntp 4.3.8 Ntp Ntp 4.3.9

The nextvar function in NTP prior to 4.2.8p6 and 4.3.x prior to 4.3.90 does not properly validate the length of its input, which allows an malicious user to cause a denial of service (application crash).

Ntp Ntp Ntp Ntp 4.3.0 Ntp Ntp 4.3.1 Ntp Ntp 4.3.2 Ntp Ntp 4.3.3 Ntp Ntp 4.3.4 Ntp Ntp 4.3.5 Ntp Ntp 4.3.6 Ntp Ntp 4.3.7 Ntp Ntp 4.3.8 Ntp Ntp 4.3.10 Ntp Ntp 4.3.11

Crypto-NAK packets in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to bypass authentication.

Ntp Ntp Ntp Ntp 4.2.5 Ntp Ntp 4.2.8 Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote malicious users to cause a denial of service (memory consumption) via UDP packets to listening ports, aka Bug ID CSCue69413.

Cisco Ios Xr 4.3.1

Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP prior to 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite ...

Ntp Ntp Ntp Ntp 4.2.8

The decodenetnum function in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.

Ntp Ntp Ntp Ntp 4.2.8 Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -Siemens Tim 4r-ie Firmware Siemens Tim 4r-ie Dnp3 Firmware

1 EDB exploit

The rate limiting feature in NTP 4.x prior to 4.2.8p4 and 4.3.x prior to 4.3.77 allows remote malicious users to have unspecified impact via a large number of crafted requests.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -Citrix Xenserver 6.0.2 Citrix Xenserver 6.2.0 Citrix Xenserver 6.5 Citrix Xenserver 7.0 Siemens Tim 4r-ie Firmware Siemens Tim 4r-ie Dnp3 Firmware

Use-after-free vulnerability in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.

Ntp Ntp Ntp Ntp 4.2.8 Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

« PREV 1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook