CVE-2019-8936
NTP through 4.2.8p12 has a NULL Pointer Dereference.
- Обновитесь до 1:4.2.8p10+dfsg-5ubuntu7.3
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости ntp
За последние 30 дней в ntp опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 5
CVE-2018-7183
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.
- Обновитесь до 1:4.2.8p10+dfsg-5ubuntu7.1
Опубликовано ОбновленоCVE-2018-7185
The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.
- Обновитесь до 1:4.2.8p10+dfsg-5ubuntu7.1
Опубликовано ОбновленоCVE-2018-7184
ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.
- Обновитесь до 1:4.2.8p10+dfsg-5ubuntu7.1
Опубликовано ОбновленоCVE-2018-7182
The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.
- Обновитесь до 1:4.2.8p10+dfsg-5ubuntu7.1
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.