CVE-2009-1252
CVE-2009-1252
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.
Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.
EPSS 21,3% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
Originalquellen
- https://usn.ubuntu.com/777-1/
- http://secunia.com/advisories/35137
- http://secunia.com/advisories/35166
- http://secunia.com/advisories/37470
- http://secunia.com/advisories/35388
- http://secunia.com/advisories/35243
- http://secunia.com/advisories/37471
- http://www.debian.org/security/2009/dsa-1801
- https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html
- http://secunia.com/advisories/35308
- http://secunia.com/advisories/35253
- https://support.ntp.org/bugs/show_bug.cgi?id=1151
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:117
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
- http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0092
- http://www.securitytracker.com/id?1022243
- http://secunia.com/advisories/35138
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238
- https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
- https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00293.html
- http://secunia.com/advisories/35630
- http://www.securityfocus.com/archive/1/507985/100/0/threaded
- https://nvd.nist.gov/vuln/detail/CVE-2009-1252