Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2020-11868
HistoryApr 17, 2020 - 4:15 a.m.

CVE-2020-11868

2020-04-1704:15:10
CWE-346
[email protected]
web.nvd.nist.gov
467
5
ntp
ntpd
cve-2020-11868
network security
ip spoofing
packet synchronization
off-path attacker

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.033 Low

EPSS

Percentile

91.3%

JSON

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp.

Affected configurations

NVD
Node
ntpntpRange≤4.2.7
OR
ntpntpRange4.3.98–4.3.100
OR
ntpntpMatch4.2.8-
OR
ntpntpMatch4.2.8p1
OR
ntpntpMatch4.2.8p1-beta1
OR
ntpntpMatch4.2.8p1-beta2
OR
ntpntpMatch4.2.8p1-beta3
OR
ntpntpMatch4.2.8p1-beta4
OR
ntpntpMatch4.2.8p1-beta5
OR
ntpntpMatch4.2.8p1-rc1
OR
ntpntpMatch4.2.8p1-rc2
OR
ntpntpMatch4.2.8p10
OR
ntpntpMatch4.2.8p11
OR
ntpntpMatch4.2.8p12
OR
ntpntpMatch4.2.8p13
OR
ntpntpMatch4.2.8p2
OR
ntpntpMatch4.2.8p2-rc1
OR
ntpntpMatch4.2.8p2-rc2
OR
ntpntpMatch4.2.8p2-rc3
OR
ntpntpMatch4.2.8p3
OR
ntpntpMatch4.2.8p3-rc1
OR
ntpntpMatch4.2.8p3-rc2
OR
ntpntpMatch4.2.8p3-rc3
OR
ntpntpMatch4.2.8p4
OR
ntpntpMatch4.2.8p5
OR
ntpntpMatch4.2.8p6
OR
ntpntpMatch4.2.8p7
OR
ntpntpMatch4.2.8p8
OR
ntpntpMatch4.2.8p9
Node
redhatenterprise_linuxMatch7.0
Node
netappdata_ontapMatch-7-mode
OR
netapphci_management_nodeMatch-
OR
netappsolidfireMatch-
OR
netappvasa_provider_for_clustered_data_ontapRange7.2≥
OR
netappvasa_provider_for_clustered_data_ontapRange7.2≥vsphere
OR
netappvirtual_storage_consoleRange7.2≥vsphere
OR
netappclustered_data_ontapMatch-
Node
netapphci_storage_nodeMatch-
AND
netapphci_storage_node_firmwareMatch-
Node
netappfabric-attached_storage_8300Match-
AND
netappfabric-attached_storage_8300_firmwareMatch-
Node
netappfabric-attached_storage_8700Match-
AND
netappfabric-attached_storage_8700_firmwareMatch-
Node
netappfabric-attached_storage_a400Match-
AND
netappfabric-attached_storage_a400_firmwareMatch-
Node
netappall_flash_fabric-attached_storage_8300Match-
AND
netappall_flash_fabric-attached_storage_8300_firmwareMatch-
Node
netappall_flash_fabric-attached_storage_8700Match-
AND
netappall_flash_fabric-attached_storage_8700_firmwareMatch-
Node
netappall_flash_fabric-attached_storage_a400Match-
AND
netappall_flash_fabric-attached_storage_a400_firmwareMatch-
Node
debiandebian_linuxMatch8.0
Node
opensuseleapMatch15.1
OR
opensuseleapMatch15.2

Social References

More

Related

nessus 30
redhatcve 1
openvas 17
ibm 13
nvd 1
prion 1
cloudlinux 2
osv 1
ubuntucve 1
debiancve 1
veracode 1
mageia 1
f5 1
debian 1
cvelist 1
oraclelinux 1
fedora 1
centos 1
amazon 1
redhat 1
aix 1
gentoo 1
suse 2
photon 6
ics 1
oracle 1
nessus
nessus
EulerOS Virtualization 3.0.6.6 : ntp (EulerOS-SA-2020-2450)
2020-11-06 00:00:00
Photon OS 1.0: Ntp PHSA-2020-1.0-0292
2020-05-13 00:00:00
Debian DLA-2201-1 : ntp security update
2020-05-07 00:00:00
redhatcve
redhatcve
CVE-2020-11868
2020-04-17 07:33:45
openvas
openvas
Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2020-1684)
2020-06-16 00:00:00
Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2020-1927)
2020-09-04 00:00:00
Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2020-2450)
2020-11-05 00:00:00
ibm
ibm
Security Bulletin: IBM API Connect V5 is impacted by a denial of service (DoS) vulnerability in NTP (CVE-2020-11868)
2021-04-06 17:10:20
Security Bulletin: Vulnerability in Network Time Protocol (NTP) affects IBM Virtualization Engine TS7700 (CVE-2020-11868)
2020-10-27 03:12:38
Security Bulletin: Vulnerability in NTP affects IBM Integrated Analytics System
2020-11-10 11:30:54
nvd
nvd
CVE-2020-11868
2020-04-17 04:15:10
prion
prion
Design/Logic Flaw
2020-04-17 04:15:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2020-11868
2021-10-05 14:08:54
Fix of CVE: CVE-2020-11868
2021-09-30 16:12:36
osv
osv
ntp - security update
2020-05-05 00:00:00
ubuntucve
ubuntucve
CVE-2020-11868
2020-04-17 00:00:00
debiancve
debiancve
CVE-2020-11868
2020-04-17 04:15:10
veracode
veracode
Denial Of Service (DoS)
2020-06-24 03:08:04
mageia
mageia
Updated ntp packages fix security vulnerability
2020-05-15 18:48:04
f5
f5
K44305703 : NTP vulnerability CVE-2020-11868
2020-06-02 00:00:00
debian
debian
[SECURITY] [DLA 2201-1] ntp security update
2020-05-05 10:03:33
cvelist
cvelist
CVE-2020-11868
2020-04-17 03:31:05
oraclelinux
oraclelinux
ntp security update
2020-06-24 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: ntp-4.2.8p15-1.fc32
2020-07-02 01:13:48
centos
centos
ntp, ntpdate, sntp security update
2020-06-23 19:52:57
amazon
amazon
Medium: ntp
2020-07-14 02:38:00
redhat
redhat
(RHSA-2020:2663) Moderate: ntp security update
2020-06-23 11:08:48
aix
aix
There are vulnerabilities in NTPv4 that affect AIX.
2020-10-26 15:14:11
gentoo
gentoo
NTP: Multiple vulnerabilities
2020-07-26 00:00:00
suse
suse
Security update for ntp (moderate)
2020-07-19 00:00:00
Security update for ntp (moderate)
2020-07-06 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2020-0093
2020-05-20 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0093
2020-05-20 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0239
2020-05-07 00:00:00
ics
ics
​Hitachi Energy AFF66x
2023-08-22 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.033 Low

EPSS

Percentile

91.3%

JSON
Related for CVE-2020-11868
nessus30redhatcve1openvas17ibm13nvd1prion1cloudlinux2osv1ubuntucve1debiancve1veracode1mageia1f51debian1cvelist1oraclelinux1fedora1centos1amazon1redhat1aix1gentoo1suse2photon6ics1oracle1