Published: 27/03/2017 Updated: 24/01/2019

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

NTP prior to 4.2.8p10 and 4.3.x prior to 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ntp ntp 4.3.13
ntp ntp 4.3.14
ntp ntp 4.3.20
ntp ntp 4.3.21
ntp ntp 4.3.28
ntp ntp 4.3.29
ntp ntp 4.3.36
ntp ntp 4.3.37
ntp ntp 4.3.43
ntp ntp 4.3.44
ntp ntp 4.3.50
ntp ntp 4.3.51
ntp ntp 4.3.52
ntp ntp 4.3.59
ntp ntp 4.3.6
ntp ntp 4.3.66
ntp ntp 4.3.67
ntp ntp 4.3.74
ntp ntp 4.3.75
ntp ntp 4.3.81
ntp ntp 4.3.82
ntp ntp 4.3.89
ntp ntp 4.3.9
ntp ntp 4.3.11
ntp ntp 4.3.12
ntp ntp 4.3.19
ntp ntp 4.3.2
ntp ntp 4.3.26
ntp ntp 4.3.27
ntp ntp 4.3.34
ntp ntp 4.3.35
ntp ntp 4.3.41
ntp ntp 4.3.42
ntp ntp 4.3.49
ntp ntp 4.3.5
ntp ntp 4.3.57
ntp ntp 4.3.58
ntp ntp 4.3.64
ntp ntp 4.3.65
ntp ntp 4.3.71
ntp ntp 4.3.72
ntp ntp 4.3.73
ntp ntp 4.3.8
ntp ntp 4.3.80
ntp ntp 4.3.87
ntp ntp 4.3.88
ntp ntp 4.2.8
ntp ntp 4.3.15
ntp ntp 4.3.16
ntp ntp 4.3.22
ntp ntp 4.3.23
ntp ntp 4.3.3
ntp ntp 4.3.30
ntp ntp 4.3.31
ntp ntp 4.3.38
ntp ntp 4.3.39
ntp ntp 4.3.45
ntp ntp 4.3.46
ntp ntp 4.3.53
ntp ntp 4.3.54
ntp ntp 4.3.60
ntp ntp 4.3.61
ntp ntp 4.3.68
ntp ntp 4.3.69
ntp ntp 4.3.76
ntp ntp 4.3.77
ntp ntp 4.3.83
ntp ntp 4.3.84
ntp ntp 4.3.90
ntp ntp 4.3.91
ntp ntp 4.3.0
ntp ntp 4.3.1
ntp ntp 4.3.10
ntp ntp 4.3.17
ntp ntp 4.3.18
ntp ntp 4.3.24
ntp ntp 4.3.25
ntp ntp 4.3.32
ntp ntp 4.3.33
ntp ntp 4.3.4
ntp ntp 4.3.40
ntp ntp 4.3.47
ntp ntp 4.3.48
ntp ntp 4.3.55
ntp ntp 4.3.56
ntp ntp 4.3.62
ntp ntp 4.3.63
ntp ntp 4.3.7
ntp ntp 4.3.70
ntp ntp 4.3.78
ntp ntp 4.3.79
ntp ntp 4.3.85
ntp ntp 4.3.86
ntp ntp 4.3.92
ntp ntp 4.3.93

Synopsis Moderate: ntp security update Type/Severity Security Advisory: Moderate Topic An update for ntp is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which give ...

Synopsis Moderate: ntp security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for ntp is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CV ...

Several security issues were fixed in NTP ...

Ephemeral association time spoofing additional protectionntpd in ntp 42x before 428p7 and 43x before 4392 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack This issue exists because of an ...

Denial of Service via Malformed Config:A vulnerability was discovered in the NTP server's parsing of configuration directives A remote, authenticated attacker could cause ntpd to crash by sending a crafted message(CVE-2017-6464) Potential Overflows in ctl_put() functions:A vulnerability was found in NTP, in the building of response packets with c ...

CWE-20 http://www.securitytracker.com/id/1038123 http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu http://support.ntp.org/bin/view/Main/NtpBug3387 http://www.securityfocus.com/bid/97049 https://support.apple.com/HT208144 https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc https://access.redhat.com/errata/RHSA-2017:3071 https://access.redhat.com/errata/RHSA-2018:0855 https://usn.ubuntu.com/3707-2/https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us https://access.redhat.com/errata/RHSA-2017:3071 https://nvd.nist.gov https://usn.ubuntu.com/3707-2/

CVE-2017-6463

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect