CVE-2016-7431

Опубликовано: 21 нояб. 2016

Источник: redhat

CVSS3: 5.3

CVSS2: 5

Описание

NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.

Отчет

This issue did not affect the versions of ntp as shipped with Red Hat Enterprise Linux 5, 6 and 7.

Затронутые пакеты

Платформа	Пакет	Состояние
Red Hat Enterprise Linux 5	ntp	Not affected
Red Hat Enterprise Linux 6	ntp	Not affected
Red Hat Enterprise Linux 7	ntp	Not affected

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-20

https://bugzilla.redhat.com/show_bug.cgi?id=1397331ntp: Zero Origin timestamp regression

5.3 Medium

CVSS3

5 Medium

CVSS2

Связанные уязвимости

CVE-2016-7431

CVSS3: 5.3

ubuntu

больше 8 лет назад

NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.

CVE-2016-7431

CVSS3: 5.3

nvd

больше 8 лет назад

NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.

CVE-2016-7431

CVSS3: 5.3

debian

больше 8 лет назад

NTP before 4.2.8p9 allows remote attackers to bypass the origin timest ...

GHSA-27gj-3475-hjqq

CVSS3: 5.3

github

около 3 лет назад

NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.

openSUSE-SU-2016:3280-1

suse-cvrf

больше 8 лет назад

Security update for ntp

5.3 Medium

CVSS3

5 Medium

CVSS2