Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-7426

Опубликовано: 13 янв. 2017
Источник: ubuntu
Приоритет: low
EPSS Средний
CVSS2: 4.3
CVSS3: 7.5

Описание

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.

РелизСтатусПримечание
artful

not-affected

1:4.2.8p9+dfsg-2ubuntu1
bionic

not-affected

1:4.2.8p9+dfsg-2ubuntu1
cosmic

not-affected

1:4.2.8p9+dfsg-2ubuntu1
devel

not-affected

1:4.2.8p9+dfsg-2ubuntu1
esm-apps/bionic

not-affected

1:4.2.8p9+dfsg-2ubuntu1
esm-infra-legacy/trusty

released

1:4.2.6.p5+dfsg-3ubuntu2.14.04.11
esm-infra/xenial

released

1:4.2.8p4+dfsg-3ubuntu5.5
precise

ignored

end of life
precise/esm

not-affected

1:4.2.6.p3+dfsg-1ubuntu3.12
trusty

released

1:4.2.6.p5+dfsg-3ubuntu2.14.04.11

Показывать по

EPSS

Процентиль: 97%
0.38912
Средний

4.3 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 5.9
redhat
почти 9 лет назад

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.

CVSS3: 7.5
nvd
почти 9 лет назад

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.

CVSS3: 7.5
debian
почти 9 лет назад

NTP before 4.2.8p9 rate limits responses received from the configured ...

CVSS3: 7.5
github
больше 3 лет назад

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.

oracle-oval
почти 9 лет назад

ELSA-2017-0252: ntp security update (MODERATE)

EPSS

Процентиль: 97%
0.38912
Средний

4.3 Medium

CVSS2

7.5 High

CVSS3