CVE-2019-8936
NTP through 4.2.8p12 has a NULL Pointer Dereference.
- Mettez à jour vers 1:4.2.8p10+dfsg-5ubuntu7.3
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de ntp
Vulnérabilité publiée pour ntp au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 5
CVE-2018-7183
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.
- Mettez à jour vers 1:4.2.8p10+dfsg-5ubuntu7.1
Publication Mise à jourCVE-2018-7185
The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.
- Mettez à jour vers 1:4.2.8p10+dfsg-5ubuntu7.1
Publication Mise à jourCVE-2018-7184
ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.
- Mettez à jour vers 1:4.2.8p10+dfsg-5ubuntu7.1
Publication Mise à jourCVE-2018-7182
The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.
- Mettez à jour vers 1:4.2.8p10+dfsg-5ubuntu7.1
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.