Описание
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ntp | fixed | 1:4.2.8p10+dfsg-1 | package | |
| ntp | no-dsa | jessie | package | |
| ntp | no-dsa | wheezy | package |
Примечания
http://support.ntp.org/bin/view/Main/NtpBug3389
https://cure53.de/pentest-report_ntp.pdf
Связанные уязвимости
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.
Уязвимость реализации протокола синхронизации времени NTP, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю вызвать отказ в обслуживании