CVE-2015-7871
ntp: crypto-NAK symmetric association authentication bypass vulnerability
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (alta), Amazon (alta), Ubuntu (media).
Descripción
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | ntp, ntp-debuginfo, ntp-doc y 2 más | 4.2.6p5-34.27.amzn1 |
| debian 11 | ntp | 1:4.2.8p4+dfsg-1 |
| debian 7 | ntp | 1:4.2.6.p5+dfsg-2+deb7u6 |
| debian 8 | ntp | 1:4.2.6.p5+dfsg-7+deb8u1 |
| ubuntu 12.04 | ntp | 1:4.2.6.p3+dfsg-1ubuntu3.6 |
| ubuntu 14.04 | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5 |
| ubuntu 14.04-ESM | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5 |
| ubuntu 15.04 | ntp | 1:4.2.6.p5+dfsg-3ubuntu6.2 |
| ubuntu 15.10 | ntp | 1:4.2.6.p5+dfsg-3ubuntu8.1 |
Mostrar las 13 entradas de 9 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | ntp | 4.2.6p5-34.27.amzn1 |
| amazon linux 1 | ntp-debuginfo | 4.2.6p5-34.27.amzn1 |
| amazon linux 1 | ntp-doc | 4.2.6p5-34.27.amzn1 |
| amazon linux 1 | ntp-perl | 4.2.6p5-34.27.amzn1 |
| amazon linux 1 | ntpdate | 4.2.6p5-34.27.amzn1 |
| debian 11 | ntp | 1:4.2.8p4+dfsg-1 |
| debian 7 | ntp | 1:4.2.6.p5+dfsg-2+deb7u6 |
| debian 8 | ntp | 1:4.2.6.p5+dfsg-7+deb8u1 |
| ubuntu 12.04 | ntp | 1:4.2.6.p3+dfsg-1ubuntu3.6 |
| ubuntu 14.04 | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5 |
| ubuntu 14.04-ESM | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5 |
| ubuntu 15.04 | ntp | 1:4.2.6.p5+dfsg-3ubuntu6.2 |
| ubuntu 15.10 | ntp | 1:4.2.6.p5+dfsg-3ubuntu8.1 |
Referencias
- http://blog.talosintel.com/2015/10/ntpd-vulnerabilities.html
- http://support.ntp.org/bin/view/Main/NtpBug2941
- http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_Security_Vulner
- http://talosintel.com/reports/TALOS-2015-0069/
- http://www.debian.org/security/2015/dsa-3388
- http://www.securityfocus.com/bid/77287
- http://www.securitytracker.com/id/1033951
- https://access.redhat.com/security/cve/CVE-2015-7871
Las 17 referencias
- https://bugzilla.redhat.com/show_bug.cgi?id=1274265
- https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839
- https://nvd.nist.gov/vuln/detail/CVE-2015-7871
- https://security.gentoo.org/glsa/201604-03
- https://security.gentoo.org/glsa/201607-15
- https://security.netapp.com/advisory/ntap-20171004-0001/
- https://ubuntu.com/security/notices/USN-2783-1
- https://www.cve.org/CVERecord?id=CVE-2015-7871