Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-7434

Опубликовано: 21 нояб. 2016
Источник: redhat
CVSS3: 5.3
CVSS2: 3.5
EPSS Средний

Описание

The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.

Отчет

This issue did not affect the versions of ntp as shipped with Red Hat Enterprise Linux 5, 6 and 7 as they did not include support for mrulist.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5ntpNot affected
Red Hat Enterprise Linux 6ntpNot affected
Red Hat Enterprise Linux 7ntpNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-20
https://bugzilla.redhat.com/show_bug.cgi?id=1397334ntp: read_mru_list() does inadequate incoming packet checks

EPSS

Процентиль: 99%
0.52935
Средний

5.3 Medium

CVSS3

3.5 Low

CVSS2

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 9 лет назад

The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.

CVSS3: 7.5
nvd
больше 9 лет назад

The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.

CVSS3: 7.5
debian
больше 9 лет назад

The read_mru_list function in NTP before 4.2.8p9 allows remote attacke ...

CVSS3: 7.5
github
больше 4 лет назад

The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.

suse-cvrf
больше 9 лет назад

Security update for ntp

EPSS

Процентиль: 99%
0.52935
Средний

5.3 Medium

CVSS3

3.5 Low

CVSS2