Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2018-3854
HistoryDec 19, 2018 - 12:00 a.m.

ntp security update

2018-12-1900:00:00
linux.oracle.com
136

0.967 High

EPSS

Percentile

99.7%

JSON

[4.2.6p5-15.0.1]

  • add disable monitor to default ntp.conf [CVE-2013-5211]
    [4.2.6p5-15]
  • fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)
    [4.2.6p5-14]
  • fix CVE-2016-7429 patch to work correctly on multicast client (#1422973)
    [4.2.6p5-13]
  • fix buffer overflow in datum refclock driver (CVE-2017-6462)
  • fix crash with invalid unpeer command (CVE-2017-6463)
  • fix potential crash with invalid server command (CVE-2017-6464)
OSVersionArchitecturePackageVersionFilename
oracle linux6srcntp< 4.2.6p5-15.0.1.el6_10ntp-4.2.6p5-15.0.1.el6_10.src.rpm
oracle linux6i686ntp< 4.2.6p5-15.0.1.el6_10ntp-4.2.6p5-15.0.1.el6_10.i686.rpm
oracle linux6noarchntp-doc< 4.2.6p5-15.0.1.el6_10ntp-doc-4.2.6p5-15.0.1.el6_10.noarch.rpm
oracle linux6i686ntp-perl< 4.2.6p5-15.0.1.el6_10ntp-perl-4.2.6p5-15.0.1.el6_10.i686.rpm
oracle linux6i686ntpdate< 4.2.6p5-15.0.1.el6_10ntpdate-4.2.6p5-15.0.1.el6_10.i686.rpm
oracle linux6srcntp< 4.2.6p5-15.0.1.el6_10ntp-4.2.6p5-15.0.1.el6_10.src.rpm
oracle linux6x86_64ntp< 4.2.6p5-15.0.1.el6_10ntp-4.2.6p5-15.0.1.el6_10.x86_64.rpm
oracle linux6noarchntp-doc< 4.2.6p5-15.0.1.el6_10ntp-doc-4.2.6p5-15.0.1.el6_10.noarch.rpm
oracle linux6x86_64ntp-perl< 4.2.6p5-15.0.1.el6_10ntp-perl-4.2.6p5-15.0.1.el6_10.x86_64.rpm
oracle linux6x86_64ntpdate< 4.2.6p5-15.0.1.el6_10ntpdate-4.2.6p5-15.0.1.el6_10.x86_64.rpm

Related

nessus 74
ibm 13
redhat 6
openvas 27
centos 4
oraclelinux 5
freebsd 2
freebsd_advisory 2
amazon 3
mageia 3
fedora 3
aix 2
veracode 3
cert 1
suse 1
threatpost 4
checkpoint_advisories 2
zdt 2
securityvulns 3
nvd 3
packetstorm 2
exploitpack 2
cve 3
cvelist 3
redhatcve 2
prion 3
ubuntucve 3
debiancve 4
f5 3
slackware 1
ubuntu 2
osv 1
gentoo 1
ics 1
checkpoint_security 1
metasploit 1
fortinet 1
thn 1
archlinux 1
nessus
nessus
OracleVM 3.3 / 3.4 : ntp (OVMSA-2018-0290)
2018-12-21 00:00:00
Virtuozzo 6 : ntp / ntp-doc / ntp-perl / ntpdate (VZLSA-2017-3071)
2018-11-27 00:00:00
NewStart CGSL MAIN 4.05 : ntp Multiple Vulnerabilities (NS-SA-2019-0127)
2019-08-12 00:00:00
ibm
ibm
Security Bulletin: A security vulnerability has been identified in Red Hat® Enterprise Linux (RHEL) Server shipped with PurePower Integrated Manager (PPIM) (CVE-2017-6462 CVE-2017-6463 CVE-2017-6464)
2018-06-18 01:36:03
Security Bulletin: Multiple vulnerabilities in OpenSource NTP affects IBM Netezza Host Management
2019-10-18 03:10:29
Security Bulletin: IBM Security Access Manager Appliance is affected by NTP vulnerabilities (CVE-2017-6462, CVE-2017-6463, CVE-2017-6464)
2018-08-21 19:46:25
redhat
redhat
(RHSA-2017:3071) Moderate: ntp security update
2017-10-26 06:19:03
(RHSA-2018:0855) Moderate: ntp security, bug fix, and enhancement update
2018-04-10 05:02:34
(RHSA-2020:1470) Low: ntp security update
2020-04-14 14:34:34
openvas
openvas
RedHat Update for ntp RHSA-2017:3071-01
2017-10-27 00:00:00
CentOS Update for ntp CESA-2017:3071 centos6
2017-10-27 00:00:00
Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2019-1938)
2020-01-23 00:00:00
centos
centos
ntp, ntpdate, sntp security update
2018-04-26 17:47:34
ntp, ntpdate security update
2017-10-26 11:47:10
ntp, ntpdate, sntp security update
2019-08-30 03:44:39
oraclelinux
oraclelinux
ntp security, bug fix, and enhancement update
2019-08-13 00:00:00
ntp security, bug fix, and enhancement update
2018-04-16 00:00:00
ntp security update
2017-10-26 00:00:00
freebsd
freebsd
FreeBSD -- Multiple vulnerabilities of ntp
2017-04-12 00:00:00
ntpd DRDoS / Amplification Attack using ntpdc monlist command
2014-01-01 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-17:03.ntp
2017-04-12 00:00:00
FreeBSD-SA-14:02.ntpd
2014-01-14 00:00:00
amazon
amazon
Medium: ntp
2017-04-20 05:54:00
Medium: ntp
2021-09-08 23:35:00
Low: ntp
2019-11-19 17:52:00
mageia
mageia
Updated ntp packages fix security vulnerability
2017-05-09 09:35:29
Updated ntp packages work around security vulnerability
2014-01-31 20:44:56
Updated ntp packages fix security vulnerability
2018-09-13 23:38:07
fedora
fedora
[SECURITY] Fedora 25 Update: ntp-4.2.6p5-44.fc25
2017-03-29 01:35:03
[SECURITY] Fedora 24 Update: ntp-4.2.6p5-44.fc24
2017-04-18 16:49:59
[SECURITY] Fedora 26 Update: ntp-4.2.8p10-1.fc26
2017-04-01 18:10:49
aix
aix
There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX,There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.,There are multiple vulnerabilities in NTPv3 and NTPv4 that impact VIOS
2017-07-06 14:53:51
Network Time Protocol (NTP) vulnerability in AIX,Network Time Protocol (NTP) vulnerability in VIOS
2014-06-12 16:24:51
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:30:44
Denial Of Service (DoS)
2019-01-15 09:27:06
Denial Of Service (DoS)
2019-05-02 06:37:19
cert
cert
NTP can be abused to amplify denial-of-service attack traffic
2014-01-10 00:00:00
suse
suse
DDoS reflection attacks in ntp
2014-01-20 17:05:38
threatpost
threatpost
Volume of NTP Amplification Attacks Getting Louder
2014-04-29 13:03:29
NTP Amplification Blamed for 400 Gbps DDoS Attack
2014-02-11 12:21:35
PointDNS Recovers from Massive DDoS Attack
2014-05-12 15:35:26
checkpoint_advisories
checkpoint_advisories
NTP Servers Monlist Command Denial of Service (CVE-2013-5211)
2014-01-19 00:00:00
Network Time Protocol Daemon peer xmit mode Denial of Service (CVE-2017-6464)
2017-05-11 00:00:00
zdt
zdt
NTP ntpd monlist Query Reflection - Denial of Service
2014-04-29 00:00:00
ntp 4.2.8p11 - Local Buffer Overflow (PoC) Vulnerability
2018-06-20 00:00:00
securityvulns
securityvulns
ntp traffic amplification
2014-01-14 00:00:00
[security bulletin] HPSBUX02960 SSRT101419 rev.1 - HP-UX Running NTP, Remote Denial of Service &#40;DoS&#41;
2014-01-14 00:00:00
TA14-013A: NTP Amplification Attacks Using CVE-2013-5211
2014-01-14 00:00:00
nvd
nvd
CVE-2016-7429
2017-01-13 16:59:00
CVE-2013-5211
2014-01-02 14:59:03
CVE-2018-12327
2018-06-20 14:29:00
packetstorm
packetstorm
NTP Amplification Denial Of Service Tool
2014-07-16 00:00:00
ntp 4.2.8p11 Local Buffer Overflow
2018-06-21 00:00:00
exploitpack
exploitpack
NTP ntpd monlist Query Reflection - Denial of Service
2014-04-28 00:00:00
ntp 4.2.8p11 - Local Buffer Overflow (PoC)
2018-06-20 00:00:00
cve
cve
CVE-2016-7429
2017-01-13 16:59:00
CVE-2013-5211
2014-01-02 14:59:03
CVE-2018-12327
2018-06-20 14:29:00
cvelist
cvelist
CVE-2016-7429
2017-01-13 16:00:00
CVE-2013-5211
2014-01-02 11:00:00
CVE-2018-12327
2018-06-20 14:00:00
redhatcve
redhatcve
CVE-2016-7429
2016-11-22 11:17:39
CVE-2018-12327
2019-10-10 05:39:28
prion
prion
Code injection
2017-01-13 16:59:00
Security feature bypass
2014-01-02 14:59:00
Stack overflow
2018-06-20 14:29:00
ubuntucve
ubuntucve
CVE-2016-7429
2017-01-13 00:00:00
CVE-2013-5211
2014-01-02 00:00:00
CVE-2018-12327
2018-06-20 00:00:00
debiancve
debiancve
CVE-2016-7429
2017-01-13 16:59:00
CVE-2013-5211
2014-01-02 14:59:03
CVE-2018-12327
2018-06-20 14:29:00
f5
f5
SOL15154 - NTP vulnerability CVE-2013-5211
2014-04-10 00:00:00
K15154 : NTP vulnerability CVE-2013-5211
2014-04-10 00:00:00
K42332834 : NTP vulnerability CVE-2018-12327
2018-09-28 00:00:00
slackware
slackware
ntp
2014-02-13 16:38:35
ubuntu
ubuntu
NTP vulnerability
2020-01-09 00:00:00
NTP vulnerability
2021-03-15 00:00:00
osv
osv
ntp vulnerability
2021-03-15 22:24:29
gentoo
gentoo
NTP: Traffic amplification
2014-01-16 00:00:00
ics
ics
NTP Reflection Attack
2018-09-06 12:00:00
checkpoint_security
checkpoint_security
Blocking NTP access on Gaia OS / IPSO OS (CVE-2013-5211)
2014-03-01 22:00:00
metasploit
metasploit
NTP Monitor List Scanner
2010-01-27 23:25:17
fortinet
fortinet
FortiAnalyzer could potentially be used in NTP amplification attacks
2020-06-22 00:00:00
thn
thn
Abusing Network Time Protocol (NTP) to perform massive Reflection DDoS attack
2014-01-02 20:25:00
archlinux
archlinux
[ASA-201810-2] ntp: arbitrary code execution
2018-10-01 00:00:00

0.967 High

EPSS

Percentile

99.7%

JSON
Related for ELSA-2018-3854
nessus74ibm13redhat6openvas27centos4oraclelinux5freebsd2freebsd_advisory2amazon3mageia3fedora3aix2veracode3cert1suse1threatpost4checkpoint_advisories2zdt2securityvulns3nvd3packetstorm2exploitpack2cve3cvelist3redhatcve2prion3ubuntucve3debiancve4f53slackware1ubuntu2osv1gentoo1ics1checkpoint_security1metasploit1fortinet1thn1archlinux1