Описание
NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1:4.2.8p4+dfsg-3ubuntu6 |
| esm-infra-legacy/trusty | released | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 |
| esm-infra/xenial | released | 1:4.2.8p4+dfsg-3ubuntu5.3 |
| precise | released | 1:4.2.6.p3+dfsg-1ubuntu3.11 |
| precise/esm | not-affected | 1:4.2.6.p3+dfsg-1ubuntu3.11 |
| trusty | released | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 |
| trusty/esm | released | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 |
| upstream | released | 4.2.8p6 |
| vivid | ignored | end of life |
| vivid/stable-phone-overlay | ignored | end of life |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.
NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.
NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers t ...
NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.
ELSA-2016-0780: ntp security and bug fix update (MODERATE)
EPSS
5 Medium
CVSS2
7.5 High
CVSS3