CVE-2019-8936
NTP through 4.2.8p12 has a NULL Pointer Dereference.
- Actualiza a 1:4.2.8p10+dfsg-5ubuntu7.3
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de ntp
Vulnerabilidades publicadas para ntp en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 5
CVE-2018-7183
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.
- Actualiza a 1:4.2.8p10+dfsg-5ubuntu7.1
Publicación ActualizaciónCVE-2018-7185
The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.
- Actualiza a 1:4.2.8p10+dfsg-5ubuntu7.1
Publicación ActualizaciónCVE-2018-7184
ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.
- Actualiza a 1:4.2.8p10+dfsg-5ubuntu7.1
Publicación ActualizaciónCVE-2018-7182
The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.
- Actualiza a 1:4.2.8p10+dfsg-5ubuntu7.1
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.