CVE-2015-7973
CVE-2015-7973
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.
CVSS 6.5 · Media · EPSS 3,4% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
ntp Debian:11
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:4.2.8p7+dfsg-1
Actualiza a 1:4.2.8p7+dfsg-1
ntp Ubuntu:14.04:LTS
- Versiones
- 1:4.2.6.p5+dfsg-3ubuntu2
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.1
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.2
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.3
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.6
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.7
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.8
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10
Actualiza a 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10
ntp Ubuntu:16.04:LTS
- Versiones
- 1:4.2.6.p5+dfsg-3ubuntu8
- 1:4.2.6.p5+dfsg-3ubuntu8.1
- 1:4.2.6.p5+dfsg-3ubuntu9
- 1:4.2.8p4+dfsg-3ubuntu1
- 1:4.2.8p4+dfsg-3ubuntu2
- 1:4.2.8p4+dfsg-3ubuntu3
- 1:4.2.8p4+dfsg-3ubuntu4
- 1:4.2.8p4+dfsg-3ubuntu5
- 1:4.2.8p4+dfsg-3ubuntu5.1
- 1:4.2.8p4+dfsg-3ubuntu5.2
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:4.2.8p4+dfsg-3ubuntu5.3
Actualiza a 1:4.2.8p4+dfsg-3ubuntu5.3
Fuentes originales
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd
- http://www.ubuntu.com/usn/USN-3096-1
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html
- http://support.ntp.org/bin/view/Main/NtpBug2935
- http://www.securitytracker.com/id/1034782
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html
- https://www.kb.cert.org/vuls/id/718152
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us
- https://security.netapp.com/advisory/ntap-20171031-0001/
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html
- http://www.securityfocus.com/bid/81963
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html
- https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc
- https://bto.bluecoat.com/security-advisory/sa113
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html
- https://security.gentoo.org/glsa/201607-15
- https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf
- https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11
- https://nvd.nist.gov/vuln/detail/CVE-2015-7973