Lucene search
Veracode Vulnerability DatabaseVERACODE:27013HistorySep 21, 2020 - 6:30 a.m.
Arbitrary Code Execution
2020-09-2106:30:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.005 Low
EPSS
Percentile
76.3%
ntp is vulnerable to arbitrary code execution. Multiple buffer overflows in the ctl_put* functions allow remote authenticated attackers to potentially execute arbitrary code on the host OS via a long variable.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ntp:xenial | eq | 1:4.2.8p4+dfsg-3ubuntu5 | |
| ntp:trusty | eq | 1:4.2.6.p5+dfsg-3ubuntu2 |
References
support.ntp.org/bin/view/Main/NtpBug3379
support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu
www.securityfocus.com/bid/97051
www.securitytracker.com/id/1038123
cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf
support.apple.com/HT208144
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
Related
prion
prion
Buffer overflow
2017-03-27 17:59:00
f5
f5
K99254031 : NTP vulnerability CVE-2017-6458
2017-05-08 00:00:00
nessus
nessus
cvelist
cvelist
CVE-2017-6458
2017-03-27 17:00:00
nvd
nvd
CVE-2017-6458
2017-03-27 17:59:00
redhatcve
redhatcve
CVE-2017-6458
2017-03-22 02:18:17
ubuntucve
ubuntucve
CVE-2017-6458
2017-03-27 00:00:00
cve
cve
CVE-2017-6458
2017-03-27 17:59:00
debiancve
debiancve
CVE-2017-6458
2017-03-27 17:59:00
aix
aix
amazon
amazon
Medium: ntp
2017-04-20 05:54:00
openvas
openvas
Mageia: Security Advisory (MGASA-2017-0134)
2022-01-28 00:00:00
Fedora Update for ntp FEDORA-2017-72323a442f
2017-04-19 00:00:00
Fedora Update for ntp FEDORA-2017-5ebac1c112
2017-03-29 00:00:00
mageia
mageia
Updated ntp packages fix security vulnerability
2017-05-09 09:35:29
fedora
fedora
[SECURITY] Fedora 25 Update: ntp-4.2.6p5-44.fc25
2017-03-29 01:35:03
[SECURITY] Fedora 24 Update: ntp-4.2.6p5-44.fc24
2017-04-18 16:49:59
[SECURITY] Fedora 26 Update: ntp-4.2.8p10-1.fc26
2017-04-01 18:10:49
ibm
ibm
slackware
slackware
[slackware-security] ntp
2017-04-22 16:42:41
symantec
symantec
SA147 : March 2017 NTP Security Vulnerabilities
2017-04-13 08:00:00
cloudfoundry
cloudfoundry
USN-3349-1: NTP vulnerabilities | Cloud Foundry
2017-08-04 00:00:00
ics
ics
Siemens SIMATIC NET CP 443-1 OPC UA
2021-06-08 12:00:00
ubuntu
ubuntu
NTP vulnerabilities
2017-07-05 00:00:00
apple
apple
About the security content of macOS High Sierra 10.13
2017-09-25 00:00:00
About the security content of macOS High Sierra 10.13 - Apple Support
2020-02-06 07:51:09