Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2016-1141

Опубликовано: 31 мая 2016
Источник: oracle-oval
Платформа: Oracle Linux 6
Платформа: Oracle Linux 7

Описание

ELSA-2016-1141: ntp security update (MODERATE)

[4.2.6p5-10.el6_8.1]

  • don't allow spoofed packets to demobilize associations (CVE-2015-7979, CVE-2016-1547)
  • don't allow spoofed packet to enable symmetric interleaved mode (CVE-2016-1548)
  • check mode of new source in config command (CVE-2016-2518)
  • make MAC check resilient against timing attack (CVE-2016-1550)

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

ntp

4.2.6p5-10.el6.1

ntp-doc

4.2.6p5-10.el6.1

ntp-perl

4.2.6p5-10.el6.1

ntpdate

4.2.6p5-10.el6.1

Oracle Linux i686

ntp

4.2.6p5-10.el6.1

ntp-doc

4.2.6p5-10.el6.1

ntp-perl

4.2.6p5-10.el6.1

ntpdate

4.2.6p5-10.el6.1

Oracle Linux 7

Oracle Linux x86_64

ntp

4.2.6p5-22.el7_2.2

ntp-doc

4.2.6p5-22.el7_2.2

ntp-perl

4.2.6p5-22.el7_2.2

ntpdate

4.2.6p5-22.el7_2.2

sntp

4.2.6p5-22.el7_2.2

Связанные уязвимости

suse-cvrf
больше 9 лет назад

Security update for ntp

suse-cvrf
около 9 лет назад

Security update for ntp

suse-cvrf
больше 9 лет назад

Security update for ntp

suse-cvrf
больше 9 лет назад

Security update for ntp

CVSS3: 7.5
ubuntu
больше 8 лет назад

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.