Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-9042

Опубликовано: 04 июн. 2018
Источник: ubuntu
Приоритет: medium
CVSS2: 4.3
CVSS3: 5.9

Описание

An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.

РелизСтатусПримечание
devel

not-affected

1:4.2.8p10+dfsg-5ubuntu1
esm-infra-legacy/trusty

not-affected

1:4.2.6.p5+dfsg-3ubuntu2.14.04.10
esm-infra/xenial

not-affected

1:4.2.8p4+dfsg-3ubuntu5.3
precise

not-affected

1:4.2.6.p3+dfsg-1ubuntu3.11
precise/esm

not-affected

1:4.2.6.p3+dfsg-1ubuntu3.11
trusty

not-affected

1:4.2.6.p5+dfsg-3ubuntu2.14.04.10
trusty/esm

not-affected

1:4.2.6.p5+dfsg-3ubuntu2.14.04.10
upstream

released

1:4.2.8p10+dfsg-1
vivid/stable-phone-overlay

ignored

end of life
vivid/ubuntu-core

DNE

Показывать по

4.3 Medium

CVSS2

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.9
redhat
почти 9 лет назад

An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.

CVSS3: 5.9
nvd
больше 7 лет назад

An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.

CVSS3: 5.9
debian
больше 7 лет назад

An exploitable denial of service vulnerability exists in the origin ti ...

CVSS3: 5.9
github
больше 3 лет назад

An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.

suse-cvrf
почти 9 лет назад

Security update for ntp

4.3 Medium

CVSS2

5.9 Medium

CVSS3