Описание
Security update for ntp
This update for ntp fixes the following issues:
Fixed multiple out of bound writes: CVE-2023-26551 (bsc#1210386), CVE-2023-26552 (bsc#1210388), CVE-2023-26553 (bsc#1210387), CVE-2023-26554 (bsc#1210389).
Список пакетов
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
Image SLES15-SP4-SAP-Azure-LI-BYOS
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
Image SLES15-SP4-SAP-Azure-VLI-BYOS
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
Image SLES15-SP5-SAP-Azure-LI-BYOS
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
Image SLES15-SP5-SAP-Azure-VLI-BYOS
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
SUSE Linux Enterprise Module for Legacy 15 SP4
openSUSE Leap 15.4
Ссылки
- Link for SUSE-SU-2023:2142-1
- E-Mail link for SUSE-SU-2023:2142-1
- SUSE Security Ratings
- SUSE Bug 1210386
- SUSE Bug 1210387
- SUSE Bug 1210388
- SUSE Bug 1210389
- SUSE CVE CVE-2023-26551 page
- SUSE CVE CVE-2023-26552 page
- SUSE CVE CVE-2023-26553 page
- SUSE CVE CVE-2023-26554 page
Описание
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.
Затронутые продукты
Ссылки
- CVE-2023-26551
- SUSE Bug 1210386
Описание
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.
Затронутые продукты
Ссылки
- CVE-2023-26552
- SUSE Bug 1210388
Описание
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.
Затронутые продукты
Ссылки
- CVE-2023-26553
- SUSE Bug 1210387
Описание
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.
Затронутые продукты
Ссылки
- CVE-2023-26554
- SUSE Bug 1210389