CVE-2016-4956
CVE-2016-4956
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.
CVSS 5.8 · Media · EPSS 16,4% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
ntp Debian:11
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:4.2.8p8+dfsg-1
Actualiza a 1:4.2.8p8+dfsg-1
ntp Ubuntu:14.04:LTS
- Versiones
- 1:4.2.6.p5+dfsg-3ubuntu2
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.1
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.2
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.3
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.6
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.7
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.8
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10
Actualiza a 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10
ntp Ubuntu:16.04:LTS
- Versiones
- 1:4.2.6.p5+dfsg-3ubuntu8
- 1:4.2.6.p5+dfsg-3ubuntu8.1
- 1:4.2.6.p5+dfsg-3ubuntu9
- 1:4.2.8p4+dfsg-3ubuntu1
- 1:4.2.8p4+dfsg-3ubuntu2
- 1:4.2.8p4+dfsg-3ubuntu3
- 1:4.2.8p4+dfsg-3ubuntu4
- 1:4.2.8p4+dfsg-3ubuntu5
- 1:4.2.8p4+dfsg-3ubuntu5.1
- 1:4.2.8p4+dfsg-3ubuntu5.2
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:4.2.8p4+dfsg-3ubuntu5.3
Actualiza a 1:4.2.8p4+dfsg-3ubuntu5.3
Fuentes originales
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html
- http://www.ubuntu.com/usn/USN-3096-1
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/
- http://www.securityfocus.com/bid/91009
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html
- https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03757en_us
- http://www.securitytracker.com/id/1036037
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://support.ntp.org/bin/view/Main/NtpBug3042
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html
- http://bugs.ntp.org/3042
- http://www.kb.cert.org/vuls/id/321640
- http://support.ntp.org/bin/view/Main/SecurityNotice
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html
- https://security.gentoo.org/glsa/201607-15
- http://packetstormsecurity.com/files/137321/Slackware-Security-Advisory-ntp-Updates.html
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpd
- https://nvd.nist.gov/vuln/detail/CVE-2016-4956