CVE-2015-7853
ntp: reference clock memory corruption vulnerability
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (media), Ubuntu (media).
Descripción
The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| debian 11 | ntp | 1:4.2.8p4+dfsg-1 |
| ubuntu 12.04 | ntp | 1:4.2.6.p3+dfsg-1ubuntu3.6 |
| ubuntu 14.04 | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5 |
| ubuntu 14.04-ESM | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5 |
| ubuntu 15.04 | ntp | 1:4.2.6.p5+dfsg-3ubuntu6.2 |
| ubuntu 15.10 | ntp | 1:4.2.6.p5+dfsg-3ubuntu8.1 |
Referencias
- http://blog.talosintel.com/2015/10/ntpd-vulnerabilities.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html
- http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html
Las 35 referencias
- http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html
- http://support.ntp.org/bin/view/Main/NtpBug2920
- http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_Security_Vulner
- http://talosintel.com/reports/TALOS-2015-0064/
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp
- http://www.securityfocus.com/archive/1/536737/100/0/threaded
- http://www.securityfocus.com/archive/1/536760/100/0/threaded
- http://www.securityfocus.com/archive/1/536796/100/0/threaded
- http://www.securityfocus.com/archive/1/536833/100/0/threaded
- http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded
- http://www.securityfocus.com/archive/1/archive/1/536760/100/100/threaded
- http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded
- http://www.securityfocus.com/archive/1/archive/1/536833/100/100/threaded
- http://www.securityfocus.com/bid/77273
- http://www.securitytracker.com/id/1033951
- http://www.talosintel.com/vulnerability-reports/
- http://www.ubuntu.com/usn/USN-2783-1
- https://access.redhat.com/security/cve/CVE-2015-7853
- https://bto.bluecoat.com/security-advisory/sa103
- https://bugzilla.redhat.com/show_bug.cgi?id=1274262
- https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf
- https://nvd.nist.gov/vuln/detail/CVE-2015-7853
- https://security.gentoo.org/glsa/201607-15
- https://security.netapp.com/advisory/ntap-20171004-0001/
- https://ubuntu.com/security/notices/USN-2783-1
- https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
- https://www.cve.org/CVERecord?id=CVE-2015-7853