CVE-2015-7853
ntp: reference clock memory corruption vulnerability
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Red Hat (orta), Ubuntu (orta).
Açıklama
The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | ntp | 1:4.2.8p4+dfsg-1 |
| ubuntu 12.04 | ntp | 1:4.2.6.p3+dfsg-1ubuntu3.6 |
| ubuntu 14.04 | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5 |
| ubuntu 14.04-ESM | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5 |
| ubuntu 15.04 | ntp | 1:4.2.6.p5+dfsg-3ubuntu6.2 |
| ubuntu 15.10 | ntp | 1:4.2.6.p5+dfsg-3ubuntu8.1 |
Referanslar
- http://blog.talosintel.com/2015/10/ntpd-vulnerabilities.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html
- http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html
35 referansın hepsi
- http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html
- http://support.ntp.org/bin/view/Main/NtpBug2920
- http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_Security_Vulner
- http://talosintel.com/reports/TALOS-2015-0064/
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp
- http://www.securityfocus.com/archive/1/536737/100/0/threaded
- http://www.securityfocus.com/archive/1/536760/100/0/threaded
- http://www.securityfocus.com/archive/1/536796/100/0/threaded
- http://www.securityfocus.com/archive/1/536833/100/0/threaded
- http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded
- http://www.securityfocus.com/archive/1/archive/1/536760/100/100/threaded
- http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded
- http://www.securityfocus.com/archive/1/archive/1/536833/100/100/threaded
- http://www.securityfocus.com/bid/77273
- http://www.securitytracker.com/id/1033951
- http://www.talosintel.com/vulnerability-reports/
- http://www.ubuntu.com/usn/USN-2783-1
- https://access.redhat.com/security/cve/CVE-2015-7853
- https://bto.bluecoat.com/security-advisory/sa103
- https://bugzilla.redhat.com/show_bug.cgi?id=1274262
- https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf
- https://nvd.nist.gov/vuln/detail/CVE-2015-7853
- https://security.gentoo.org/glsa/201607-15
- https://security.netapp.com/advisory/ntap-20171004-0001/
- https://ubuntu.com/security/notices/USN-2783-1
- https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
- https://www.cve.org/CVERecord?id=CVE-2015-7853