Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2016-9042
Vulnerability from cvelistv5
Published
2018-06-04 20:00
Modified
2024-09-17 03:53
Severity ?
EPSS score ?
Summary
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Talos | Network Time Protocol |
Version: NTP 4.2.8p9 |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-06T02:42:09.927Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "1038123", tags: [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred", ], url: "http://www.securitytracker.com/id/1038123", }, { name: "FreeBSD-SA-17:03", tags: [ "vendor-advisory", "x_refsource_FREEBSD", "x_transferred", ], url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc", }, { name: "1039427", tags: [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred", ], url: "http://www.securitytracker.com/id/1039427", }, { name: "97046", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/97046", }, { name: "USN-3349-1", tags: [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred", ], url: "http://www.ubuntu.com/usn/USN-3349-1", }, { name: "20170412 FreeBSD Security Advisory FreeBSD-SA-17:03.ntp", tags: [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred", ], url: "http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded", }, { name: "20171101 APPLE-SA-2017-10-31-8 Additional information for APPLE-SA-2017-09-25-1 macOS High Sierra 10.13", tags: [ "mailing-list", "x_refsource_FULLDISC", "x_transferred", ], url: "http://seclists.org/fulldisclosure/2017/Nov/7", }, { name: "20170412 FreeBSD Security Advisory FreeBSD-SA-17:03.ntp", tags: [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred", ], url: "http://www.securityfocus.com/archive/1/540403/100/0/threaded", }, { name: "FEDORA-2017-20d54b2782", tags: [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/", }, { name: "20170925 APPLE-SA-2017-09-25-1 macOS High Sierra 10.13", tags: [ "mailing-list", "x_refsource_FULLDISC", "x_transferred", ], url: "http://seclists.org/fulldisclosure/2017/Sep/62", }, { name: "20170422 [slackware-security] ntp (SSA:2017-112-02)", tags: [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred", ], url: "http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10201", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://support.apple.com/kb/HT208144", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://support.f5.com/csp/article/K39041624", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://bto.bluecoat.com/security-advisory/sa147", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "Network Time Protocol", vendor: "Talos", versions: [ { status: "affected", version: "NTP 4.2.8p9", }, ], }, ], datePublic: "2017-03-29T00:00:00", descriptions: [ { lang: "en", value: "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.", }, ], metrics: [ { cvssV3_0: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 3.7, baseSeverity: "LOW", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, }, ], problemTypes: [ { descriptions: [ { description: "denial of service", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2022-04-19T19:17:22", orgId: "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", shortName: "talos", }, references: [ { name: "1038123", tags: [ "vdb-entry", "x_refsource_SECTRACK", ], url: "http://www.securitytracker.com/id/1038123", }, { name: "FreeBSD-SA-17:03", tags: [ "vendor-advisory", "x_refsource_FREEBSD", ], url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc", }, { name: "1039427", tags: [ "vdb-entry", "x_refsource_SECTRACK", ], url: "http://www.securitytracker.com/id/1039427", }, { name: "97046", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/97046", }, { name: "USN-3349-1", tags: [ "vendor-advisory", "x_refsource_UBUNTU", ], url: "http://www.ubuntu.com/usn/USN-3349-1", }, { name: "20170412 FreeBSD Security Advisory FreeBSD-SA-17:03.ntp", tags: [ "mailing-list", "x_refsource_BUGTRAQ", ], url: "http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded", }, { name: "20171101 APPLE-SA-2017-10-31-8 Additional information for APPLE-SA-2017-09-25-1 macOS High Sierra 10.13", tags: [ "mailing-list", "x_refsource_FULLDISC", ], url: "http://seclists.org/fulldisclosure/2017/Nov/7", }, { name: "20170412 FreeBSD Security Advisory FreeBSD-SA-17:03.ntp", tags: [ "mailing-list", "x_refsource_BUGTRAQ", ], url: "http://www.securityfocus.com/archive/1/540403/100/0/threaded", }, { name: "FEDORA-2017-20d54b2782", tags: [ "vendor-advisory", "x_refsource_FEDORA", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/", }, { name: "20170925 APPLE-SA-2017-09-25-1 macOS High Sierra 10.13", tags: [ "mailing-list", "x_refsource_FULLDISC", ], url: "http://seclists.org/fulldisclosure/2017/Sep/62", }, { name: "20170422 [slackware-security] ntp (SSA:2017-112-02)", tags: [ "mailing-list", "x_refsource_BUGTRAQ", ], url: "http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us", }, { tags: [ "x_refsource_MISC", ], url: "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260", }, { tags: [ "x_refsource_MISC", ], url: "http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10201", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://support.apple.com/kb/HT208144", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://support.f5.com/csp/article/K39041624", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://bto.bluecoat.com/security-advisory/sa147", }, { tags: [ "x_refsource_MISC", ], url: "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf", }, { tags: [ "x_refsource_MISC", ], url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "talos-cna@cisco.com", DATE_PUBLIC: "2017-03-29T00:00:00", ID: "CVE-2016-9042", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Network Time Protocol", version: { version_data: [ { version_value: "NTP 4.2.8p9", }, ], }, }, ], }, vendor_name: "Talos", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.", }, ], }, impact: { cvss: { baseScore: 3.7, baseSeverity: "Low", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "denial of service", }, ], }, ], }, references: { reference_data: [ { name: "1038123", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1038123", }, { name: "FreeBSD-SA-17:03", refsource: "FREEBSD", url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc", }, { name: "1039427", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1039427", }, { name: "97046", refsource: "BID", url: "http://www.securityfocus.com/bid/97046", }, { name: "USN-3349-1", refsource: "UBUNTU", url: "http://www.ubuntu.com/usn/USN-3349-1", }, { name: "20170412 FreeBSD Security Advisory FreeBSD-SA-17:03.ntp", refsource: "BUGTRAQ", url: "http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded", }, { name: "20171101 APPLE-SA-2017-10-31-8 Additional information for APPLE-SA-2017-09-25-1 macOS High Sierra 10.13", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2017/Nov/7", }, { name: "20170412 FreeBSD Security Advisory FreeBSD-SA-17:03.ntp", refsource: "BUGTRAQ", url: "http://www.securityfocus.com/archive/1/540403/100/0/threaded", }, { name: "FEDORA-2017-20d54b2782", refsource: "FEDORA", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/", }, { name: "20170925 APPLE-SA-2017-09-25-1 macOS High Sierra 10.13", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2017/Sep/62", }, { name: "20170422 [slackware-security] ntp (SSA:2017-112-02)", refsource: "BUGTRAQ", url: "http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded", }, { name: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us", refsource: "CONFIRM", url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us", }, { name: "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260", refsource: "MISC", url: "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260", }, { name: "http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html", refsource: "MISC", url: "http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html", }, { name: "https://kc.mcafee.com/corporate/index?page=content&id=SB10201", refsource: "CONFIRM", url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10201", }, { name: "https://support.apple.com/kb/HT208144", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT208144", }, { name: "https://support.f5.com/csp/article/K39041624", refsource: "CONFIRM", url: "https://support.f5.com/csp/article/K39041624", }, { name: "https://bto.bluecoat.com/security-advisory/sa147", refsource: "CONFIRM", url: "https://bto.bluecoat.com/security-advisory/sa147", }, { name: "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html", refsource: "MISC", url: "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html", }, { name: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf", refsource: "CONFIRM", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf", }, { name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11", refsource: "MISC", url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", assignerShortName: "talos", cveId: "CVE-2016-9042", datePublished: "2018-06-04T20:00:00Z", dateReserved: "2016-10-26T00:00:00", dateUpdated: "2024-09-17T03:53:51.612Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2016-9042\",\"sourceIdentifier\":\"talos-cna@cisco.com\",\"published\":\"2018-06-04T20:29:00.417\",\"lastModified\":\"2024-11-21T03:00:29.693\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.\"},{\"lang\":\"es\",\"value\":\"Existe una vulnerabilidad explotable de denegación de servicio (DoS) en la funcionalidad de comprobación de marca de tiempo de origen de ntpd 4.2.8p9. Se puede emplear un paquete de red no autenticado especialmente manipulado para reiniciar la marca de tiempo de origen esperada para los peers objetivo. Las respuestas legítimas de los peers objetivo no pasarán la comprobación de marca de tiempo de origen (TEST2), lo que hace que la respuesta se elimine y se cree una condición de denegación de servicio (DoS).\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}],\"cvssMetricV30\":[{\"source\":\"talos-cna@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":3.7,\"baseSeverity\":\"LOW\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.2,\"impactScore\":1.4}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:N/A:P\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE002C76-406D-4F22-B738-E17BDEA70BCC\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA79CE41-D873-4A4A-A20C-83EB8772E5FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53E56F4F-B418-44DD-9C97-7276A4C58F3E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"c.4.2.8.4.0\",\"matchCriteriaId\":\"F1A1FDA7-BE46-4FAB-A3FD-9A40C770C4AB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_net_cp_443-1_opc_ua_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22EFD09A-3D77-47B0-93FB-50F6C13A2F9A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_net_cp_443-1_opc_ua:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F488810-73E3-4475-975A-C2FCA037E78B\"}]}]}],\"references\":[{\"url\":\"http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"http://seclists.org/fulldisclosure/2017/Nov/7\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"http://seclists.org/fulldisclosure/2017/Sep/62\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"http://www.securityfocus.com/archive/1/540403/100/0/threaded\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"http://www.securityfocus.com/bid/97046\",\"source\":\"talos-cna@cisco.com\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1038123\",\"source\":\"talos-cna@cisco.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039427\",\"source\":\"talos-cna@cisco.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-3349-1\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"https://bto.bluecoat.com/security-advisory/sa147\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf\",\"source\":\"talos-cna@cisco.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content&id=SB10201\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc\",\"source\":\"talos-cna@cisco.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT208144\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"https://support.f5.com/csp/article/K39041624\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us\",\"source\":\"talos-cna@cisco.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260\",\"source\":\"talos-cna@cisco.com\",\"tags\":[\"Exploit\",\"Mitigation\",\"Third Party Advisory\"]},{\"url\":\"http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2017/Nov/7\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2017/Sep/62\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/540403/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/97046\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1038123\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039427\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-3349-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bto.bluecoat.com/security-advisory/sa147\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content&id=SB10201\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT208144\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.f5.com/csp/article/K39041624\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Mitigation\",\"Third Party Advisory\"]}]}}", }, }
fkie_cve-2016-9042
Vulnerability from fkie_nvd
Published
2018-06-04 20:29
Modified
2024-11-21 03:00
Severity ?
Summary
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*", matchCriteriaId: "EE002C76-406D-4F22-B738-E17BDEA70BCC", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:freebsd:freebsd:10.0:*:*:*:*:*:*:*", matchCriteriaId: "CA79CE41-D873-4A4A-A20C-83EB8772E5FA", vulnerable: true, }, { criteria: "cpe:2.3:o:freebsd:freebsd:11.0:*:*:*:*:*:*:*", matchCriteriaId: "53E56F4F-B418-44DD-9C97-7276A4C58F3E", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:*", matchCriteriaId: "F1A1FDA7-BE46-4FAB-A3FD-9A40C770C4AB", versionEndExcluding: "c.4.2.8.4.0", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:siemens:simatic_net_cp_443-1_opc_ua_firmware:*:*:*:*:*:*:*:*", matchCriteriaId: "22EFD09A-3D77-47B0-93FB-50F6C13A2F9A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:siemens:simatic_net_cp_443-1_opc_ua:-:*:*:*:*:*:*:*", matchCriteriaId: "7F488810-73E3-4475-975A-C2FCA037E78B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.", }, { lang: "es", value: "Existe una vulnerabilidad explotable de denegación de servicio (DoS) en la funcionalidad de comprobación de marca de tiempo de origen de ntpd 4.2.8p9. Se puede emplear un paquete de red no autenticado especialmente manipulado para reiniciar la marca de tiempo de origen esperada para los peers objetivo. Las respuestas legítimas de los peers objetivo no pasarán la comprobación de marca de tiempo de origen (TEST2), lo que hace que la respuesta se elimine y se cree una condición de denegación de servicio (DoS).", }, ], id: "CVE-2016-9042", lastModified: "2024-11-21T03:00:29.693", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, exploitabilityScore: 8.6, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV30: [ { cvssData: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 3.7, baseSeverity: "LOW", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, exploitabilityScore: 2.2, impactScore: 1.4, source: "talos-cna@cisco.com", type: "Secondary", }, ], cvssMetricV31: [ { cvssData: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 2.2, impactScore: 3.6, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2018-06-04T20:29:00.417", references: [ { source: "talos-cna@cisco.com", url: "http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html", }, { source: "talos-cna@cisco.com", url: "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html", }, { source: "talos-cna@cisco.com", url: "http://seclists.org/fulldisclosure/2017/Nov/7", }, { source: "talos-cna@cisco.com", url: "http://seclists.org/fulldisclosure/2017/Sep/62", }, { source: "talos-cna@cisco.com", url: "http://www.securityfocus.com/archive/1/540403/100/0/threaded", }, { source: "talos-cna@cisco.com", url: "http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded", }, { source: "talos-cna@cisco.com", url: "http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded", }, { source: "talos-cna@cisco.com", tags: [ "Permissions Required", "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/97046", }, { source: "talos-cna@cisco.com", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1038123", }, { source: "talos-cna@cisco.com", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1039427", }, { source: "talos-cna@cisco.com", url: "http://www.ubuntu.com/usn/USN-3349-1", }, { source: "talos-cna@cisco.com", url: "https://bto.bluecoat.com/security-advisory/sa147", }, { source: "talos-cna@cisco.com", tags: [ "Third Party Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf", }, { source: "talos-cna@cisco.com", url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10201", }, { source: "talos-cna@cisco.com", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/", }, { source: "talos-cna@cisco.com", tags: [ "Third Party Advisory", ], url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc", }, { source: "talos-cna@cisco.com", url: "https://support.apple.com/kb/HT208144", }, { source: "talos-cna@cisco.com", url: "https://support.f5.com/csp/article/K39041624", }, { source: "talos-cna@cisco.com", tags: [ "Third Party Advisory", ], url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us", }, { source: "talos-cna@cisco.com", url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11", }, { source: "talos-cna@cisco.com", tags: [ "Exploit", "Mitigation", "Third Party Advisory", ], url: "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://seclists.org/fulldisclosure/2017/Nov/7", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://seclists.org/fulldisclosure/2017/Sep/62", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/archive/1/540403/100/0/threaded", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Permissions Required", "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/97046", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1038123", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1039427", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.ubuntu.com/usn/USN-3349-1", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://bto.bluecoat.com/security-advisory/sa147", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10201", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://support.apple.com/kb/HT208144", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://support.f5.com/csp/article/K39041624", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Exploit", "Mitigation", "Third Party Advisory", ], url: "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260", }, ], sourceIdentifier: "talos-cna@cisco.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-20", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
ICSA-21-159-11
Vulnerability from csaf_cisa
Published
2021-06-08 00:00
Modified
2021-06-08 00:00
Summary
Siemens SIMATIC NET CP 443-1 OPC UA
Notes
CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of these vulnerabilities could create a denial-of-service condition as well as other specified and unspecified impacts.
Critical infrastructure sectors
Multiple Sectors
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
CISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.cisa.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.cisa.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Exploitability
No known public exploits specifically target these vulnerabilities.
{ document: { acknowledgments: [ { organization: "Siemens", summary: "reporting these vulnerabilities to CISA", }, ], category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Disclosure is not limited", tlp: { label: "WHITE", url: "https://us-cert.cisa.gov/tlp/", }, }, lang: "en-US", notes: [ { category: "general", text: "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", title: "CISA Disclaimer", }, { category: "legal_disclaimer", text: "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", title: "Legal Notice", }, { category: "summary", text: "Successful exploitation of these vulnerabilities could create a denial-of-service condition as well as other specified and unspecified impacts.", title: "Risk evaluation", }, { category: "other", text: "Multiple Sectors", title: "Critical infrastructure sectors", }, { category: "other", text: "Worldwide", title: "Countries/areas deployed", }, { category: "other", text: "Germany", title: "Company headquarters location", }, { category: "general", text: "CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:", title: "Recommended Practices", }, { category: "general", text: "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\nCISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.cisa.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", title: "Recommended Practices", }, { category: "general", text: "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.cisa.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.", title: "Recommended Practices", }, { category: "general", text: "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", title: "Additional Resources", }, { category: "other", text: "No known public exploits specifically target these vulnerabilities.", title: "Exploitability", }, ], publisher: { category: "coordinator", contact_details: "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", name: "CISA", namespace: "https://www.cisa.gov/", }, references: [ { category: "external", summary: "SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA - CSAF Version", url: "https://cert-portal.siemens.com/productcert/csaf/ssa-211752.json", }, { category: "self", summary: "ICS Advisory ICSA-21-159-11 JSON", url: "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-159-11.json", }, { category: "self", summary: "ICS Advisory ICSA-21-159-11 Web Version", url: "https://www.cisa.gov/news-events/ics-advisories/icsa-21-159-11", }, { category: "external", summary: "Recommended Practices", url: "https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01", }, { category: "external", summary: "Recommended Practices", url: "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", }, { category: "external", summary: "Recommended Practices", url: "https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B", }, { category: "external", summary: "SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA - PDF Version", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf", }, { category: "external", summary: "SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA - TXT Version", url: "https://cert-portal.siemens.com/productcert/txt/ssa-211752.txt", }, ], title: "Siemens SIMATIC NET CP 443-1 OPC UA", tracking: { current_release_date: "2021-06-08T00:00:00.000000Z", generator: { engine: { name: "CISA CSAF Generator", version: "1.0.0", }, }, id: "ICSA-21-159-11", initial_release_date: "2021-06-08T00:00:00.000000Z", revision_history: [ { date: "2021-06-08T00:00:00.000000Z", legacy_version: "Initial", number: "1", summary: "ICSA-21-159-11 Siemens SIMATIC NET CP 443-1 OPC UA", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version_range", name: "vers:all/*", product: { name: "SIMATIC CP 443-1 OPC UA (6GK7443-1UX00-0XE0)", product_id: "CSAFPID-0001", product_identification_helper: { model_numbers: [ "6GK7443-1UX00-0XE0", ], }, }, }, ], category: "product_name", name: "SIMATIC CP 443-1 OPC UA", }, ], category: "vendor", name: "Siemens", }, ], }, vulnerabilities: [ { cve: "CVE-2015-7705", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2015-7705 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2015-7705.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-7705", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2015-7705", }, { cve: "CVE-2015-7853", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, notes: [ { category: "summary", text: "The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2015-7853 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2015-7853.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-7853", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2015-7853", }, { cve: "CVE-2015-8138", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2015-8138 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2015-8138.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8138", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2015-8138", }, { cve: "CVE-2016-1547", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-1547 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-1547.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1547", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-1547", }, { cve: "CVE-2016-1548", cwe: { id: "CWE-285", name: "Improper Authorization", }, notes: [ { category: "summary", text: "An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-1548 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-1548.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1548", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 7.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-1548", }, { cve: "CVE-2016-1550", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-1550 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-1550.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1550", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-1550", }, { cve: "CVE-2016-2518", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-2518 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-2518.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2518", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-2518", }, { cve: "CVE-2016-4953", cwe: { id: "CWE-287", name: "Improper Authentication", }, notes: [ { category: "summary", text: "ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-4953 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-4953.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4953", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-4953", }, { cve: "CVE-2016-4954", cwe: { id: "CWE-362", name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", }, notes: [ { category: "summary", text: "The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-4954 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-4954.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4954", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-4954", }, { cve: "CVE-2016-4955", cwe: { id: "CWE-362", name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", }, notes: [ { category: "summary", text: "ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-4955 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-4955.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4955", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-4955", }, { cve: "CVE-2016-4956", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-4956 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-4956.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4956", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-4956", }, { cve: "CVE-2016-7431", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-7431 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-7431.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7431", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-7431", }, { cve: "CVE-2016-7433", cwe: { id: "CWE-682", name: "Incorrect Calculation", }, notes: [ { category: "summary", text: "NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a \"root distance that did not include the peer dispersion.\"", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-7433 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-7433.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7433", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-7433", }, { cve: "CVE-2016-9042", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-9042 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-9042.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9042", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-9042", }, { cve: "CVE-2017-6458", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2017-6458 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2017-6458.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6548", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2017-6458", }, ], }
icsa-21-159-11
Vulnerability from csaf_cisa
Published
2021-06-08 00:00
Modified
2021-06-08 00:00
Summary
Siemens SIMATIC NET CP 443-1 OPC UA
Notes
CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of these vulnerabilities could create a denial-of-service condition as well as other specified and unspecified impacts.
Critical infrastructure sectors
Multiple Sectors
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
CISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.cisa.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.cisa.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Exploitability
No known public exploits specifically target these vulnerabilities.
{ document: { acknowledgments: [ { organization: "Siemens", summary: "reporting these vulnerabilities to CISA", }, ], category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Disclosure is not limited", tlp: { label: "WHITE", url: "https://us-cert.cisa.gov/tlp/", }, }, lang: "en-US", notes: [ { category: "general", text: "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", title: "CISA Disclaimer", }, { category: "legal_disclaimer", text: "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", title: "Legal Notice", }, { category: "summary", text: "Successful exploitation of these vulnerabilities could create a denial-of-service condition as well as other specified and unspecified impacts.", title: "Risk evaluation", }, { category: "other", text: "Multiple Sectors", title: "Critical infrastructure sectors", }, { category: "other", text: "Worldwide", title: "Countries/areas deployed", }, { category: "other", text: "Germany", title: "Company headquarters location", }, { category: "general", text: "CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:", title: "Recommended Practices", }, { category: "general", text: "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\nCISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.cisa.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", title: "Recommended Practices", }, { category: "general", text: "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.cisa.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.", title: "Recommended Practices", }, { category: "general", text: "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", title: "Additional Resources", }, { category: "other", text: "No known public exploits specifically target these vulnerabilities.", title: "Exploitability", }, ], publisher: { category: "coordinator", contact_details: "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", name: "CISA", namespace: "https://www.cisa.gov/", }, references: [ { category: "external", summary: "SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA - CSAF Version", url: "https://cert-portal.siemens.com/productcert/csaf/ssa-211752.json", }, { category: "self", summary: "ICS Advisory ICSA-21-159-11 JSON", url: "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-159-11.json", }, { category: "self", summary: "ICS Advisory ICSA-21-159-11 Web Version", url: "https://www.cisa.gov/news-events/ics-advisories/icsa-21-159-11", }, { category: "external", summary: "Recommended Practices", url: "https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01", }, { category: "external", summary: "Recommended Practices", url: "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", }, { category: "external", summary: "Recommended Practices", url: "https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B", }, { category: "external", summary: "SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA - PDF Version", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf", }, { category: "external", summary: "SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA - TXT Version", url: "https://cert-portal.siemens.com/productcert/txt/ssa-211752.txt", }, ], title: "Siemens SIMATIC NET CP 443-1 OPC UA", tracking: { current_release_date: "2021-06-08T00:00:00.000000Z", generator: { engine: { name: "CISA CSAF Generator", version: "1.0.0", }, }, id: "ICSA-21-159-11", initial_release_date: "2021-06-08T00:00:00.000000Z", revision_history: [ { date: "2021-06-08T00:00:00.000000Z", legacy_version: "Initial", number: "1", summary: "ICSA-21-159-11 Siemens SIMATIC NET CP 443-1 OPC UA", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version_range", name: "vers:all/*", product: { name: "SIMATIC CP 443-1 OPC UA (6GK7443-1UX00-0XE0)", product_id: "CSAFPID-0001", product_identification_helper: { model_numbers: [ "6GK7443-1UX00-0XE0", ], }, }, }, ], category: "product_name", name: "SIMATIC CP 443-1 OPC UA", }, ], category: "vendor", name: "Siemens", }, ], }, vulnerabilities: [ { cve: "CVE-2015-7705", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2015-7705 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2015-7705.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-7705", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2015-7705", }, { cve: "CVE-2015-7853", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, notes: [ { category: "summary", text: "The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2015-7853 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2015-7853.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-7853", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2015-7853", }, { cve: "CVE-2015-8138", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2015-8138 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2015-8138.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8138", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2015-8138", }, { cve: "CVE-2016-1547", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-1547 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-1547.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1547", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-1547", }, { cve: "CVE-2016-1548", cwe: { id: "CWE-285", name: "Improper Authorization", }, notes: [ { category: "summary", text: "An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-1548 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-1548.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1548", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 7.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-1548", }, { cve: "CVE-2016-1550", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-1550 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-1550.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1550", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-1550", }, { cve: "CVE-2016-2518", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-2518 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-2518.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2518", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-2518", }, { cve: "CVE-2016-4953", cwe: { id: "CWE-287", name: "Improper Authentication", }, notes: [ { category: "summary", text: "ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-4953 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-4953.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4953", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-4953", }, { cve: "CVE-2016-4954", cwe: { id: "CWE-362", name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", }, notes: [ { category: "summary", text: "The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-4954 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-4954.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4954", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-4954", }, { cve: "CVE-2016-4955", cwe: { id: "CWE-362", name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", }, notes: [ { category: "summary", text: "ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-4955 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-4955.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4955", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-4955", }, { cve: "CVE-2016-4956", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-4956 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-4956.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4956", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-4956", }, { cve: "CVE-2016-7431", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-7431 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-7431.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7431", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-7431", }, { cve: "CVE-2016-7433", cwe: { id: "CWE-682", name: "Incorrect Calculation", }, notes: [ { category: "summary", text: "NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a \"root distance that did not include the peer dispersion.\"", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-7433 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-7433.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7433", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-7433", }, { cve: "CVE-2016-9042", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2016-9042 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2016-9042.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9042", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2016-9042", }, { cve: "CVE-2017-6458", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", ], }, references: [ { summary: "CVE-2017-6458 Mitre 5.0 json", url: "https://cert-portal.siemens.com/productcert/mitre/CVE-2017-6458.json", }, { category: "external", summary: "web.nvd.nist.gov", url: "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6548", }, { category: "external", summary: "www.first.org", url: "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", }, ], remediations: [ { category: "no_fix_planned", details: "Currently no remediation is planned", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Deactivate NTP-based time synchronization of the device, if enabled. The feature is disabled by default", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "Configure an additional firewall to prevent communication to port udp/123 of an affected device", product_ids: [ "CSAFPID-0001", ], }, { category: "mitigation", details: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", product_ids: [ "CSAFPID-0001", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", ], }, ], title: "CVE-2017-6458", }, ], }
ghsa-7wvh-qg35-v45r
Vulnerability from github
Published
2022-05-13 01:01
Modified
2022-05-13 01:01
Severity ?
Details
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
{ affected: [], aliases: [ "CVE-2016-9042", ], database_specific: { cwe_ids: [ "CWE-20", ], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2018-06-04T20:29:00Z", severity: "MODERATE", }, details: "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.", id: "GHSA-7wvh-qg35-v45r", modified: "2022-05-13T01:01:06Z", published: "2022-05-13T01:01:06Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-9042", }, { type: "WEB", url: "https://bto.bluecoat.com/security-advisory/sa147", }, { type: "WEB", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf", }, { type: "WEB", url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10201", }, { type: "WEB", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6", }, { type: "WEB", url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc", }, { type: "WEB", url: "https://support.apple.com/kb/HT208144", }, { type: "WEB", url: "https://support.f5.com/csp/article/K39041624", }, { type: "WEB", url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us", }, { type: "WEB", url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11", }, { type: "WEB", url: "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260", }, { type: "WEB", url: "http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html", }, { type: "WEB", url: "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html", }, { type: "WEB", url: "http://seclists.org/fulldisclosure/2017/Nov/7", }, { type: "WEB", url: "http://seclists.org/fulldisclosure/2017/Sep/62", }, { type: "WEB", url: "http://www.securityfocus.com/archive/1/540403/100/0/threaded", }, { type: "WEB", url: "http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded", }, { type: "WEB", url: "http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded", }, { type: "WEB", url: "http://www.securityfocus.com/bid/97046", }, { type: "WEB", url: "http://www.securitytracker.com/id/1038123", }, { type: "WEB", url: "http://www.securitytracker.com/id/1039427", }, { type: "WEB", url: "http://www.ubuntu.com/usn/USN-3349-1", }, ], schema_version: "1.4.0", severity: [ { score: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", type: "CVSS_V3", }, ], }
opensuse-su-2024:11102-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
ntp-4.2.8p15-7.2 on GA media
Notes
Title of the patch
ntp-4.2.8p15-7.2 on GA media
Description of the patch
These are all security issues fixed in the ntp-4.2.8p15-7.2 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11102
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "ntp-4.2.8p15-7.2 on GA media", title: "Title of the patch", }, { category: "description", text: "These are all security issues fixed in the ntp-4.2.8p15-7.2 package on the GA media of openSUSE Tumbleweed.", title: "Description of the patch", }, { category: "details", text: "openSUSE-Tumbleweed-2024-11102", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11102-1.json", }, { category: "self", summary: "SUSE CVE CVE-2016-9042 page", url: "https://www.suse.com/security/cve/CVE-2016-9042/", }, { category: "self", summary: "SUSE CVE CVE-2017-6451 page", url: "https://www.suse.com/security/cve/CVE-2017-6451/", }, { category: "self", summary: "SUSE CVE CVE-2017-6458 page", url: "https://www.suse.com/security/cve/CVE-2017-6458/", }, { category: "self", summary: "SUSE CVE CVE-2017-6460 page", url: "https://www.suse.com/security/cve/CVE-2017-6460/", }, { category: "self", summary: "SUSE CVE CVE-2017-6462 page", url: "https://www.suse.com/security/cve/CVE-2017-6462/", }, { category: "self", summary: "SUSE CVE CVE-2017-6463 page", url: "https://www.suse.com/security/cve/CVE-2017-6463/", }, { category: "self", summary: "SUSE CVE CVE-2017-6464 page", url: "https://www.suse.com/security/cve/CVE-2017-6464/", }, { category: "self", summary: "SUSE CVE CVE-2018-12327 page", url: "https://www.suse.com/security/cve/CVE-2018-12327/", }, { category: "self", summary: "SUSE CVE CVE-2018-7170 page", url: "https://www.suse.com/security/cve/CVE-2018-7170/", }, { category: "self", summary: "SUSE CVE CVE-2018-7182 page", url: "https://www.suse.com/security/cve/CVE-2018-7182/", }, { category: "self", summary: "SUSE CVE CVE-2018-7183 page", url: "https://www.suse.com/security/cve/CVE-2018-7183/", }, { category: "self", summary: "SUSE CVE CVE-2018-7184 page", url: "https://www.suse.com/security/cve/CVE-2018-7184/", }, { category: "self", summary: "SUSE CVE CVE-2018-7185 page", url: "https://www.suse.com/security/cve/CVE-2018-7185/", }, { category: "self", summary: "SUSE CVE CVE-2018-8956 page", url: "https://www.suse.com/security/cve/CVE-2018-8956/", }, { category: "self", summary: "SUSE CVE CVE-2019-8936 page", url: "https://www.suse.com/security/cve/CVE-2019-8936/", }, { category: "self", summary: "SUSE CVE CVE-2020-11868 page", url: "https://www.suse.com/security/cve/CVE-2020-11868/", }, { category: "self", summary: "SUSE CVE CVE-2020-13817 page", url: "https://www.suse.com/security/cve/CVE-2020-13817/", }, { category: "self", summary: "SUSE CVE CVE-2020-15025 page", url: "https://www.suse.com/security/cve/CVE-2020-15025/", }, ], title: "ntp-4.2.8p15-7.2 on GA media", tracking: { current_release_date: "2024-06-15T00:00:00Z", generator: { date: "2024-06-15T00:00:00Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "openSUSE-SU-2024:11102-1", initial_release_date: "2024-06-15T00:00:00Z", revision_history: [ { date: "2024-06-15T00:00:00Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "ntp-4.2.8p15-7.2.aarch64", product: { name: "ntp-4.2.8p15-7.2.aarch64", product_id: "ntp-4.2.8p15-7.2.aarch64", }, }, { category: "product_version", name: "ntp-dcf77-tools-4.2.8p15-7.2.aarch64", product: { name: "ntp-dcf77-tools-4.2.8p15-7.2.aarch64", product_id: "ntp-dcf77-tools-4.2.8p15-7.2.aarch64", }, }, { category: "product_version", name: "ntp-doc-4.2.8p15-7.2.aarch64", product: { name: "ntp-doc-4.2.8p15-7.2.aarch64", product_id: "ntp-doc-4.2.8p15-7.2.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "ntp-4.2.8p15-7.2.ppc64le", product: { name: "ntp-4.2.8p15-7.2.ppc64le", product_id: "ntp-4.2.8p15-7.2.ppc64le", }, }, { category: "product_version", name: "ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", product: { name: "ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", product_id: "ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", }, }, { category: "product_version", name: "ntp-doc-4.2.8p15-7.2.ppc64le", product: { name: "ntp-doc-4.2.8p15-7.2.ppc64le", product_id: "ntp-doc-4.2.8p15-7.2.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "ntp-4.2.8p15-7.2.s390x", product: { name: "ntp-4.2.8p15-7.2.s390x", product_id: "ntp-4.2.8p15-7.2.s390x", }, }, { category: "product_version", name: "ntp-dcf77-tools-4.2.8p15-7.2.s390x", product: { name: "ntp-dcf77-tools-4.2.8p15-7.2.s390x", product_id: "ntp-dcf77-tools-4.2.8p15-7.2.s390x", }, }, { category: "product_version", name: "ntp-doc-4.2.8p15-7.2.s390x", product: { name: "ntp-doc-4.2.8p15-7.2.s390x", product_id: "ntp-doc-4.2.8p15-7.2.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "ntp-4.2.8p15-7.2.x86_64", product: { name: "ntp-4.2.8p15-7.2.x86_64", product_id: "ntp-4.2.8p15-7.2.x86_64", }, }, { category: "product_version", name: "ntp-dcf77-tools-4.2.8p15-7.2.x86_64", product: { name: "ntp-dcf77-tools-4.2.8p15-7.2.x86_64", product_id: "ntp-dcf77-tools-4.2.8p15-7.2.x86_64", }, }, { category: "product_version", name: "ntp-doc-4.2.8p15-7.2.x86_64", product: { name: "ntp-doc-4.2.8p15-7.2.x86_64", product_id: "ntp-doc-4.2.8p15-7.2.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "openSUSE Tumbleweed", product: { name: "openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed", product_identification_helper: { cpe: "cpe:/o:opensuse:tumbleweed", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p15-7.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", }, product_reference: "ntp-4.2.8p15-7.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p15-7.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", }, product_reference: "ntp-4.2.8p15-7.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p15-7.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", }, product_reference: "ntp-4.2.8p15-7.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p15-7.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", }, product_reference: "ntp-4.2.8p15-7.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "ntp-dcf77-tools-4.2.8p15-7.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", }, product_reference: "ntp-dcf77-tools-4.2.8p15-7.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "ntp-dcf77-tools-4.2.8p15-7.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", }, product_reference: "ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "ntp-dcf77-tools-4.2.8p15-7.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", }, product_reference: "ntp-dcf77-tools-4.2.8p15-7.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "ntp-dcf77-tools-4.2.8p15-7.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", }, product_reference: "ntp-dcf77-tools-4.2.8p15-7.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p15-7.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", }, product_reference: "ntp-doc-4.2.8p15-7.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p15-7.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", }, product_reference: "ntp-doc-4.2.8p15-7.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p15-7.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", }, product_reference: "ntp-doc-4.2.8p15-7.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p15-7.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", }, product_reference: "ntp-doc-4.2.8p15-7.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, ], }, vulnerabilities: [ { cve: "CVE-2016-9042", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9042", }, ], notes: [ { category: "general", text: "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9042", url: "https://www.suse.com/security/cve/CVE-2016-9042", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2016-9042", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2016-9042", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2016-9042", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-9042", }, { cve: "CVE-2017-6451", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6451", }, ], notes: [ { category: "general", text: "The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6451", url: "https://www.suse.com/security/cve/CVE-2017-6451", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6451", url: "https://bugzilla.suse.com/1030050", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-6451", }, { cve: "CVE-2017-6458", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6458", }, ], notes: [ { category: "general", text: "Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6458", url: "https://www.suse.com/security/cve/CVE-2017-6458", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6458", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6458", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6458", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-6458", }, { cve: "CVE-2017-6460", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6460", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6460", url: "https://www.suse.com/security/cve/CVE-2017-6460", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6460", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6460", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6460", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-6460", }, { cve: "CVE-2017-6462", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6462", }, ], notes: [ { category: "general", text: "Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6462", url: "https://www.suse.com/security/cve/CVE-2017-6462", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6462", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6462", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6462", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-6462", }, { cve: "CVE-2017-6463", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6463", }, ], notes: [ { category: "general", text: "NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6463", url: "https://www.suse.com/security/cve/CVE-2017-6463", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6463", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6463", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6463", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-6463", }, { cve: "CVE-2017-6464", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6464", }, ], notes: [ { category: "general", text: "NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6464", url: "https://www.suse.com/security/cve/CVE-2017-6464", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6464", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6464", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6464", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-6464", }, { cve: "CVE-2018-12327", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-12327", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-12327", url: "https://www.suse.com/security/cve/CVE-2018-12327", }, { category: "external", summary: "SUSE Bug 1098531 for CVE-2018-12327", url: "https://bugzilla.suse.com/1098531", }, { category: "external", summary: "SUSE Bug 1107887 for CVE-2018-12327", url: "https://bugzilla.suse.com/1107887", }, { category: "external", summary: "SUSE Bug 1111552 for CVE-2018-12327", url: "https://bugzilla.suse.com/1111552", }, { category: "external", summary: "SUSE Bug 1111853 for CVE-2018-12327", url: "https://bugzilla.suse.com/1111853", }, { category: "external", summary: "SUSE Bug 1155513 for CVE-2018-12327", url: "https://bugzilla.suse.com/1155513", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2018-12327", }, { cve: "CVE-2018-7170", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-7170", }, ], notes: [ { category: "general", text: "ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-7170", url: "https://www.suse.com/security/cve/CVE-2018-7170", }, { category: "external", summary: "SUSE Bug 1082210 for CVE-2018-7170", url: "https://bugzilla.suse.com/1082210", }, { category: "external", summary: "SUSE Bug 1083424 for CVE-2018-7170", url: "https://bugzilla.suse.com/1083424", }, { category: "external", summary: "SUSE Bug 1087324 for CVE-2018-7170", url: "https://bugzilla.suse.com/1087324", }, { category: "external", summary: "SUSE Bug 1098531 for CVE-2018-7170", url: "https://bugzilla.suse.com/1098531", }, { category: "external", summary: "SUSE Bug 1155513 for CVE-2018-7170", url: "https://bugzilla.suse.com/1155513", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.1, baseSeverity: "LOW", vectorString: "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2018-7170", }, { cve: "CVE-2018-7182", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-7182", }, ], notes: [ { category: "general", text: "The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-7182", url: "https://www.suse.com/security/cve/CVE-2018-7182", }, { category: "external", summary: "SUSE Bug 1082210 for CVE-2018-7182", url: "https://bugzilla.suse.com/1082210", }, { category: "external", summary: "SUSE Bug 1083426 for CVE-2018-7182", url: "https://bugzilla.suse.com/1083426", }, { category: "external", summary: "SUSE Bug 1087324 for CVE-2018-7182", url: "https://bugzilla.suse.com/1087324", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-7182", }, { cve: "CVE-2018-7183", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-7183", }, ], notes: [ { category: "general", text: "Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-7183", url: "https://www.suse.com/security/cve/CVE-2018-7183", }, { category: "external", summary: "SUSE Bug 1082210 for CVE-2018-7183", url: "https://bugzilla.suse.com/1082210", }, { category: "external", summary: "SUSE Bug 1083417 for CVE-2018-7183", url: "https://bugzilla.suse.com/1083417", }, { category: "external", summary: "SUSE Bug 1087324 for CVE-2018-7183", url: "https://bugzilla.suse.com/1087324", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-7183", }, { cve: "CVE-2018-7184", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-7184", }, ], notes: [ { category: "general", text: "ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the \"received\" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-7184", url: "https://www.suse.com/security/cve/CVE-2018-7184", }, { category: "external", summary: "SUSE Bug 1082210 for CVE-2018-7184", url: "https://bugzilla.suse.com/1082210", }, { category: "external", summary: "SUSE Bug 1083422 for CVE-2018-7184", url: "https://bugzilla.suse.com/1083422", }, { category: "external", summary: "SUSE Bug 1087324 for CVE-2018-7184", url: "https://bugzilla.suse.com/1087324", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.1, baseSeverity: "LOW", vectorString: "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2018-7184", }, { cve: "CVE-2018-7185", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-7185", }, ], notes: [ { category: "general", text: "The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the \"other side\" of an interleaved association causing the victim ntpd to reset its association.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-7185", url: "https://www.suse.com/security/cve/CVE-2018-7185", }, { category: "external", summary: "SUSE Bug 1082210 for CVE-2018-7185", url: "https://bugzilla.suse.com/1082210", }, { category: "external", summary: "SUSE Bug 1083420 for CVE-2018-7185", url: "https://bugzilla.suse.com/1083420", }, { category: "external", summary: "SUSE Bug 1087324 for CVE-2018-7185", url: "https://bugzilla.suse.com/1087324", }, { category: "external", summary: "SUSE Bug 1089405 for CVE-2018-7185", url: "https://bugzilla.suse.com/1089405", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.1, baseSeverity: "LOW", vectorString: "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2018-7185", }, { cve: "CVE-2018-8956", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-8956", }, ], notes: [ { category: "general", text: "ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a part of the same broadcast network or control a slave in that broadcast network that can capture certain required packets on the attacker's behalf and send them to the attacker.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-8956", url: "https://www.suse.com/security/cve/CVE-2018-8956", }, { category: "external", summary: "SUSE Bug 1171355 for CVE-2018-8956", url: "https://bugzilla.suse.com/1171355", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.7, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2018-8956", }, { cve: "CVE-2019-8936", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2019-8936", }, ], notes: [ { category: "general", text: "NTP through 4.2.8p12 has a NULL Pointer Dereference.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2019-8936", url: "https://www.suse.com/security/cve/CVE-2019-8936", }, { category: "external", summary: "SUSE Bug 1128525 for CVE-2019-8936", url: "https://bugzilla.suse.com/1128525", }, { category: "external", summary: "SUSE Bug 1148892 for CVE-2019-8936", url: "https://bugzilla.suse.com/1148892", }, { category: "external", summary: "SUSE Bug 1155513 for CVE-2019-8936", url: "https://bugzilla.suse.com/1155513", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2019-8936", }, { cve: "CVE-2020-11868", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11868", }, ], notes: [ { category: "general", text: "ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11868", url: "https://www.suse.com/security/cve/CVE-2020-11868", }, { category: "external", summary: "SUSE Bug 1169740 for CVE-2020-11868", url: "https://bugzilla.suse.com/1169740", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.7, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2020-11868", }, { cve: "CVE-2020-13817", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-13817", }, ], notes: [ { category: "general", text: "ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-13817", url: "https://www.suse.com/security/cve/CVE-2020-13817", }, { category: "external", summary: "SUSE Bug 1172651 for CVE-2020-13817", url: "https://bugzilla.suse.com/1172651", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-13817", }, { cve: "CVE-2020-15025", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-15025", }, ], notes: [ { category: "general", text: "ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-15025", url: "https://www.suse.com/security/cve/CVE-2020-15025", }, { category: "external", summary: "SUSE Bug 1173334 for CVE-2020-15025", url: "https://bugzilla.suse.com/1173334", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-dcf77-tools-4.2.8p15-7.2.x86_64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.aarch64", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.ppc64le", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.s390x", "openSUSE Tumbleweed:ntp-doc-4.2.8p15-7.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-15025", }, ], }
gsd-2016-9042
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
Aliases
Aliases
{ GSD: { alias: "CVE-2016-9042", description: "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.", id: "GSD-2016-9042", references: [ "https://www.suse.com/security/cve/CVE-2016-9042.html", "https://ubuntu.com/security/CVE-2016-9042", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2016-9042", ], details: "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.", id: "GSD-2016-9042", modified: "2023-12-13T01:21:21.409301Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "talos-cna@cisco.com", DATE_PUBLIC: "2017-03-29T00:00:00", ID: "CVE-2016-9042", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Network Time Protocol", version: { version_data: [ { version_value: "NTP 4.2.8p9", }, ], }, }, ], }, vendor_name: "Talos", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.", }, ], }, impact: { cvss: { baseScore: 3.7, baseSeverity: "Low", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "denial of service", }, ], }, ], }, references: { reference_data: [ { name: "1038123", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1038123", }, { name: "FreeBSD-SA-17:03", refsource: "FREEBSD", url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc", }, { name: "1039427", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1039427", }, { name: "97046", refsource: "BID", url: "http://www.securityfocus.com/bid/97046", }, { name: "USN-3349-1", refsource: "UBUNTU", url: "http://www.ubuntu.com/usn/USN-3349-1", }, { name: "20170412 FreeBSD Security Advisory FreeBSD-SA-17:03.ntp", refsource: "BUGTRAQ", url: "http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded", }, { name: "20171101 APPLE-SA-2017-10-31-8 Additional information for APPLE-SA-2017-09-25-1 macOS High Sierra 10.13", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2017/Nov/7", }, { name: "20170412 FreeBSD Security Advisory FreeBSD-SA-17:03.ntp", refsource: "BUGTRAQ", url: "http://www.securityfocus.com/archive/1/540403/100/0/threaded", }, { name: "FEDORA-2017-20d54b2782", refsource: "FEDORA", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/", }, { name: "20170925 APPLE-SA-2017-09-25-1 macOS High Sierra 10.13", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2017/Sep/62", }, { name: "20170422 [slackware-security] ntp (SSA:2017-112-02)", refsource: "BUGTRAQ", url: "http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded", }, { name: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us", refsource: "CONFIRM", url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us", }, { name: "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260", refsource: "MISC", url: "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260", }, { name: "http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html", refsource: "MISC", url: "http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html", }, { name: "https://kc.mcafee.com/corporate/index?page=content&id=SB10201", refsource: "CONFIRM", url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10201", }, { name: "https://support.apple.com/kb/HT208144", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT208144", }, { name: "https://support.f5.com/csp/article/K39041624", refsource: "CONFIRM", url: "https://support.f5.com/csp/article/K39041624", }, { name: "https://bto.bluecoat.com/security-advisory/sa147", refsource: "CONFIRM", url: "https://bto.bluecoat.com/security-advisory/sa147", }, { name: "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html", refsource: "MISC", url: "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html", }, { name: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf", refsource: "CONFIRM", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf", }, { name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11", refsource: "MISC", url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:freebsd:freebsd:10.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:freebsd:freebsd:11.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "c.4.2.8.4.0", vulnerable: true, }, ], operator: "OR", }, { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:siemens:simatic_net_cp_443-1_opc_ua_firmware:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:h:siemens:simatic_net_cp_443-1_opc_ua:-:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "talos-cna@cisco.com", ID: "CVE-2016-9042", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-20", }, ], }, ], }, references: { reference_data: [ { name: "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260", refsource: "MISC", tags: [ "Exploit", "Mitigation", "Third Party Advisory", ], url: "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260", }, { name: "FreeBSD-SA-17:03", refsource: "FREEBSD", tags: [ "Third Party Advisory", ], url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc", }, { name: "1039427", refsource: "SECTRACK", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1039427", }, { name: "1038123", refsource: "SECTRACK", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1038123", }, { name: "97046", refsource: "BID", tags: [ "Permissions Required", "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/97046", }, { name: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us", }, { name: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf", }, { name: "https://kc.mcafee.com/corporate/index?page=content&id=SB10201", refsource: "CONFIRM", tags: [], url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10201", }, { name: "20171101 APPLE-SA-2017-10-31-8 Additional information for APPLE-SA-2017-09-25-1 macOS High Sierra 10.13", refsource: "FULLDISC", tags: [], url: "http://seclists.org/fulldisclosure/2017/Nov/7", }, { name: "20170925 APPLE-SA-2017-09-25-1 macOS High Sierra 10.13", refsource: "FULLDISC", tags: [], url: "http://seclists.org/fulldisclosure/2017/Sep/62", }, { name: "https://support.f5.com/csp/article/K39041624", refsource: "CONFIRM", tags: [], url: "https://support.f5.com/csp/article/K39041624", }, { name: "20170412 FreeBSD Security Advisory FreeBSD-SA-17:03.ntp", refsource: "BUGTRAQ", tags: [], url: "http://www.securityfocus.com/archive/1/540403/100/0/threaded", }, { name: "https://bto.bluecoat.com/security-advisory/sa147", refsource: "CONFIRM", tags: [], url: "https://bto.bluecoat.com/security-advisory/sa147", }, { name: "20170422 [slackware-security] ntp (SSA:2017-112-02)", refsource: "BUGTRAQ", tags: [], url: "http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded", }, { name: "FEDORA-2017-20d54b2782", refsource: "FEDORA", tags: [], url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/", }, { name: "http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html", refsource: "MISC", tags: [], url: "http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html", }, { name: "20170412 FreeBSD Security Advisory FreeBSD-SA-17:03.ntp", refsource: "BUGTRAQ", tags: [], url: "http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded", }, { name: "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html", refsource: "MISC", tags: [], url: "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html", }, { name: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11", refsource: "MISC", tags: [], url: "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11", }, { name: "USN-3349-1", refsource: "UBUNTU", tags: [], url: "http://www.ubuntu.com/usn/USN-3349-1", }, { name: "https://support.apple.com/kb/HT208144", refsource: "CONFIRM", tags: [], url: "https://support.apple.com/kb/HT208144", }, ], }, }, impact: { baseMetricV2: { cvssV2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, exploitabilityScore: 8.6, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "MEDIUM", userInteractionRequired: false, }, baseMetricV3: { cvssV3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 2.2, impactScore: 3.6, }, }, lastModifiedDate: "2022-04-19T20:15Z", publishedDate: "2018-06-04T20:29Z", }, }, }
suse-su-2017:1052-1
Vulnerability from csaf_suse
Published
2017-04-18 14:06
Modified
2017-04-18 14:06
Summary
Security update for ntp
Notes
Title of the patch
Security update for ntp
Description of the patch
This ntp update to version 4.2.8p10 fixes the following issues:
Security issues fixed (bsc#1030050):
- CVE-2017-6464: Denial of Service via Malformed Config
- CVE-2017-6462: Buffer Overflow in DPTS Clock
- CVE-2017-6463: Authenticated DoS via Malicious Config Option
- CVE-2017-6458: Potential Overflows in ctl_put() functions
- CVE-2017-6451: Improper use of snprintf() in mx4200_send()
- CVE-2017-6460: Buffer Overflow in ntpq when fetching reslist
- CVE-2016-9042: 0rigin (zero origin) DoS.
- ntpq_stripquotes() returns incorrect Value
- ereallocarray()/eallocarray() underused
- Copious amounts of Unused Code
- Off-by-one in Oncore GPS Receiver
- Makefile does not enforce Security Flags
Bugfixes:
- Remove spurious log messages (bsc#1014172).
- Fixing ppc and ppc64 linker issue (bsc#1031085).
- clang scan-build findings
- Support for openssl-1.1.0 without compatibility modes
- Bugfix 3072 breaks multicastclient
- forking async worker: interrupted pipe I/O
- (...) time_pps_create: Exec format error
- Incorrect Logic for Peer Event Limiting
- Change the process name of forked DNS worker
- Trap Configuration Fail
- Nothing happens if minsane < maxclock < minclock
- allow -4/-6 on restrict line with mask
- out-of-bound pointers in ctl_putsys and decode_bitflags
- Move ntp-kod to /var/lib/ntp, because /var/db is not a standard directory and causes problems for
transactional updates.
Patchnames
slessp4-ntp-13066
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for ntp", title: "Title of the patch", }, { category: "description", text: "\nThis ntp update to version 4.2.8p10 fixes the following issues:\n\nSecurity issues fixed (bsc#1030050):\n- CVE-2017-6464: Denial of Service via Malformed Config\n- CVE-2017-6462: Buffer Overflow in DPTS Clock\n- CVE-2017-6463: Authenticated DoS via Malicious Config Option\n- CVE-2017-6458: Potential Overflows in ctl_put() functions\n- CVE-2017-6451: Improper use of snprintf() in mx4200_send()\n- CVE-2017-6460: Buffer Overflow in ntpq when fetching reslist\n- CVE-2016-9042: 0rigin (zero origin) DoS.\n- ntpq_stripquotes() returns incorrect Value\n- ereallocarray()/eallocarray() underused\n- Copious amounts of Unused Code\n- Off-by-one in Oncore GPS Receiver\n- Makefile does not enforce Security Flags\n\nBugfixes:\n- Remove spurious log messages (bsc#1014172).\n- Fixing ppc and ppc64 linker issue (bsc#1031085).\n- clang scan-build findings\n- Support for openssl-1.1.0 without compatibility modes\n- Bugfix 3072 breaks multicastclient\n- forking async worker: interrupted pipe I/O\n- (...) time_pps_create: Exec format error\n- Incorrect Logic for Peer Event Limiting\n- Change the process name of forked DNS worker\n- Trap Configuration Fail\n- Nothing happens if minsane < maxclock < minclock\n- allow -4/-6 on restrict line with mask\n- out-of-bound pointers in ctl_putsys and decode_bitflags\n- Move ntp-kod to /var/lib/ntp, because /var/db is not a standard directory and causes problems for\n transactional updates.\n", title: "Description of the patch", }, { category: "details", text: "slessp4-ntp-13066", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1052-1.json", }, { category: "self", summary: "URL for SUSE-SU-2017:1052-1", url: "https://www.suse.com/support/update/announcement/2017/suse-su-20171052-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2017:1052-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2017-April/002813.html", }, { category: "self", summary: "SUSE Bug 1014172", url: "https://bugzilla.suse.com/1014172", }, { category: "self", summary: "SUSE Bug 1030050", url: "https://bugzilla.suse.com/1030050", }, { category: "self", summary: "SUSE Bug 1031085", url: "https://bugzilla.suse.com/1031085", }, { category: "self", summary: "SUSE CVE CVE-2016-9042 page", url: "https://www.suse.com/security/cve/CVE-2016-9042/", }, { category: "self", summary: "SUSE CVE CVE-2017-6451 page", url: "https://www.suse.com/security/cve/CVE-2017-6451/", }, { category: "self", summary: "SUSE CVE CVE-2017-6458 page", url: "https://www.suse.com/security/cve/CVE-2017-6458/", }, { category: "self", summary: "SUSE CVE CVE-2017-6460 page", url: "https://www.suse.com/security/cve/CVE-2017-6460/", }, { category: "self", summary: "SUSE CVE CVE-2017-6462 page", url: "https://www.suse.com/security/cve/CVE-2017-6462/", }, { category: "self", summary: "SUSE CVE CVE-2017-6463 page", url: "https://www.suse.com/security/cve/CVE-2017-6463/", }, { category: "self", summary: "SUSE CVE CVE-2017-6464 page", url: "https://www.suse.com/security/cve/CVE-2017-6464/", }, ], title: "Security update for ntp", tracking: { current_release_date: "2017-04-18T14:06:55Z", generator: { date: "2017-04-18T14:06:55Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2017:1052-1", initial_release_date: "2017-04-18T14:06:55Z", revision_history: [ { date: "2017-04-18T14:06:55Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "ntp-4.2.8p10-63.1.i586", product: { name: "ntp-4.2.8p10-63.1.i586", product_id: "ntp-4.2.8p10-63.1.i586", }, }, { category: "product_version", name: "ntp-doc-4.2.8p10-63.1.i586", product: { name: "ntp-doc-4.2.8p10-63.1.i586", product_id: "ntp-doc-4.2.8p10-63.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "ntp-4.2.8p10-63.1.ia64", product: { name: "ntp-4.2.8p10-63.1.ia64", product_id: "ntp-4.2.8p10-63.1.ia64", }, }, { category: "product_version", name: "ntp-doc-4.2.8p10-63.1.ia64", product: { name: "ntp-doc-4.2.8p10-63.1.ia64", product_id: "ntp-doc-4.2.8p10-63.1.ia64", }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "ntp-4.2.8p10-63.1.ppc64", product: { name: "ntp-4.2.8p10-63.1.ppc64", product_id: "ntp-4.2.8p10-63.1.ppc64", }, }, { category: "product_version", name: "ntp-doc-4.2.8p10-63.1.ppc64", product: { name: "ntp-doc-4.2.8p10-63.1.ppc64", product_id: "ntp-doc-4.2.8p10-63.1.ppc64", }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "ntp-4.2.8p10-63.1.s390x", product: { name: "ntp-4.2.8p10-63.1.s390x", product_id: "ntp-4.2.8p10-63.1.s390x", }, }, { category: "product_version", name: "ntp-doc-4.2.8p10-63.1.s390x", product: { name: "ntp-doc-4.2.8p10-63.1.s390x", product_id: "ntp-doc-4.2.8p10-63.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "ntp-4.2.8p10-63.1.x86_64", product: { name: "ntp-4.2.8p10-63.1.x86_64", product_id: "ntp-4.2.8p10-63.1.x86_64", }, }, { category: "product_version", name: "ntp-doc-4.2.8p10-63.1.x86_64", product: { name: "ntp-doc-4.2.8p10-63.1.x86_64", product_id: "ntp-doc-4.2.8p10-63.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Server 11 SP4", product: { name: "SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4", product_identification_helper: { cpe: "cpe:/o:suse:suse_sles:11:sp4", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", product: { name: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:11:sp4", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-63.1.i586 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", }, product_reference: "ntp-4.2.8p10-63.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-63.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", }, product_reference: "ntp-4.2.8p10-63.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-63.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", }, product_reference: "ntp-4.2.8p10-63.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-63.1.s390x as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", }, product_reference: "ntp-4.2.8p10-63.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-63.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", }, product_reference: "ntp-4.2.8p10-63.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-63.1.i586 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", }, product_reference: "ntp-doc-4.2.8p10-63.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-63.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", }, product_reference: "ntp-doc-4.2.8p10-63.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-63.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", }, product_reference: "ntp-doc-4.2.8p10-63.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-63.1.s390x as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", }, product_reference: "ntp-doc-4.2.8p10-63.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-63.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4", product_id: "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", }, product_reference: "ntp-doc-4.2.8p10-63.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-63.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", }, product_reference: "ntp-4.2.8p10-63.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-63.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", }, product_reference: "ntp-4.2.8p10-63.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-63.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", }, product_reference: "ntp-4.2.8p10-63.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-63.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", }, product_reference: "ntp-4.2.8p10-63.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-63.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", }, product_reference: "ntp-4.2.8p10-63.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-63.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", }, product_reference: "ntp-doc-4.2.8p10-63.1.i586", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-63.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", }, product_reference: "ntp-doc-4.2.8p10-63.1.ia64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-63.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", }, product_reference: "ntp-doc-4.2.8p10-63.1.ppc64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-63.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", }, product_reference: "ntp-doc-4.2.8p10-63.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-63.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", }, product_reference: "ntp-doc-4.2.8p10-63.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 11 SP4", }, ], }, vulnerabilities: [ { cve: "CVE-2016-9042", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9042", }, ], notes: [ { category: "general", text: "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9042", url: "https://www.suse.com/security/cve/CVE-2016-9042", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2016-9042", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2016-9042", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2016-9042", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:55Z", details: "moderate", }, ], title: "CVE-2016-9042", }, { cve: "CVE-2017-6451", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6451", }, ], notes: [ { category: "general", text: "The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6451", url: "https://www.suse.com/security/cve/CVE-2017-6451", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6451", url: "https://bugzilla.suse.com/1030050", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:55Z", details: "moderate", }, ], title: "CVE-2017-6451", }, { cve: "CVE-2017-6458", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6458", }, ], notes: [ { category: "general", text: "Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6458", url: "https://www.suse.com/security/cve/CVE-2017-6458", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6458", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6458", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6458", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:55Z", details: "moderate", }, ], title: "CVE-2017-6458", }, { cve: "CVE-2017-6460", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6460", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6460", url: "https://www.suse.com/security/cve/CVE-2017-6460", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6460", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6460", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6460", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:55Z", details: "moderate", }, ], title: "CVE-2017-6460", }, { cve: "CVE-2017-6462", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6462", }, ], notes: [ { category: "general", text: "Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6462", url: "https://www.suse.com/security/cve/CVE-2017-6462", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6462", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6462", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6462", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:55Z", details: "moderate", }, ], title: "CVE-2017-6462", }, { cve: "CVE-2017-6463", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6463", }, ], notes: [ { category: "general", text: "NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6463", url: "https://www.suse.com/security/cve/CVE-2017-6463", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6463", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6463", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6463", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:55Z", details: "moderate", }, ], title: "CVE-2017-6463", }, { cve: "CVE-2017-6464", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6464", }, ], notes: [ { category: "general", text: "NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6464", url: "https://www.suse.com/security/cve/CVE-2017-6464", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6464", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6464", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6464", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-4.2.8p10-63.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.i586", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ia64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.ppc64", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 11 SP4:ntp-doc-4.2.8p10-63.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:55Z", details: "moderate", }, ], title: "CVE-2017-6464", }, ], }
suse-su-2017:1048-1
Vulnerability from csaf_suse
Published
2017-04-18 14:06
Modified
2017-04-18 14:06
Summary
Security update for ntp
Notes
Title of the patch
Security update for ntp
Description of the patch
This ntp update to version 4.2.8p10 fixes serveral issues.
This updated enables leap smearing. See
/usr/share/doc/packages/ntp/README.leapsmear for details.
Security issues fixed (bsc#1030050):
- CVE-2017-6464: Denial of Service via Malformed Config
- CVE-2017-6462: Buffer Overflow in DPTS Clock
- CVE-2017-6463: Authenticated DoS via Malicious Config Option
- CVE-2017-6458: Potential Overflows in ctl_put() functions
- CVE-2017-6451: Improper use of snprintf() in mx4200_send()
- CVE-2017-6460: Buffer Overflow in ntpq when fetching reslist
- CVE-2016-9042: 0rigin (zero origin) DoS.
- ntpq_stripquotes() returns incorrect Value
- ereallocarray()/eallocarray() underused
- Copious amounts of Unused Code
- Off-by-one in Oncore GPS Receiver
- Makefile does not enforce Security Flags
Bugfixes:
- Remove spurious log messages (bsc#1014172).
- clang scan-build findings
- Support for openssl-1.1.0 without compatibility modes
- Bugfix 3072 breaks multicastclient
- forking async worker: interrupted pipe I/O
- (...) time_pps_create: Exec format error
- Incorrect Logic for Peer Event Limiting
- Change the process name of forked DNS worker
- Trap Configuration Fail
- Nothing happens if minsane < maxclock < minclock
- allow -4/-6 on restrict line with mask
- out-of-bound pointers in ctl_putsys and decode_bitflags
- Move ntp-kod to /var/lib/ntp, because /var/db is not a standard directory and causes problems for
transactional updates.
Patchnames
SUSE-SLE-DESKTOP-12-SP1-2017-611,SUSE-SLE-DESKTOP-12-SP2-2017-611,SUSE-SLE-RPI-12-SP2-2017-611,SUSE-SLE-SERVER-12-SP1-2017-611,SUSE-SLE-SERVER-12-SP2-2017-611
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for ntp", title: "Title of the patch", }, { category: "description", text: "\nThis ntp update to version 4.2.8p10 fixes serveral issues.\n\nThis updated enables leap smearing. See\n/usr/share/doc/packages/ntp/README.leapsmear for details.\n\nSecurity issues fixed (bsc#1030050):\n\n- CVE-2017-6464: Denial of Service via Malformed Config\n- CVE-2017-6462: Buffer Overflow in DPTS Clock\n- CVE-2017-6463: Authenticated DoS via Malicious Config Option\n- CVE-2017-6458: Potential Overflows in ctl_put() functions\n- CVE-2017-6451: Improper use of snprintf() in mx4200_send()\n- CVE-2017-6460: Buffer Overflow in ntpq when fetching reslist\n- CVE-2016-9042: 0rigin (zero origin) DoS.\n- ntpq_stripquotes() returns incorrect Value\n- ereallocarray()/eallocarray() underused\n- Copious amounts of Unused Code\n- Off-by-one in Oncore GPS Receiver\n- Makefile does not enforce Security Flags\n\nBugfixes:\n\n- Remove spurious log messages (bsc#1014172).\n- clang scan-build findings\n- Support for openssl-1.1.0 without compatibility modes\n- Bugfix 3072 breaks multicastclient\n- forking async worker: interrupted pipe I/O\n- (...) time_pps_create: Exec format error\n- Incorrect Logic for Peer Event Limiting\n- Change the process name of forked DNS worker\n- Trap Configuration Fail\n- Nothing happens if minsane < maxclock < minclock\n- allow -4/-6 on restrict line with mask\n- out-of-bound pointers in ctl_putsys and decode_bitflags\n- Move ntp-kod to /var/lib/ntp, because /var/db is not a standard directory and causes problems for\n transactional updates.\n", title: "Description of the patch", }, { category: "details", text: "SUSE-SLE-DESKTOP-12-SP1-2017-611,SUSE-SLE-DESKTOP-12-SP2-2017-611,SUSE-SLE-RPI-12-SP2-2017-611,SUSE-SLE-SERVER-12-SP1-2017-611,SUSE-SLE-SERVER-12-SP2-2017-611", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1048-1.json", }, { category: "self", summary: "URL for SUSE-SU-2017:1048-1", url: "https://www.suse.com/support/update/announcement/2017/suse-su-20171048-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2017:1048-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2017-April/002812.html", }, { category: "self", summary: "SUSE Bug 1014172", url: "https://bugzilla.suse.com/1014172", }, { category: "self", summary: "SUSE Bug 1030050", url: "https://bugzilla.suse.com/1030050", }, { category: "self", summary: "SUSE CVE CVE-2016-9042 page", url: "https://www.suse.com/security/cve/CVE-2016-9042/", }, { category: "self", summary: "SUSE CVE CVE-2017-6451 page", url: "https://www.suse.com/security/cve/CVE-2017-6451/", }, { category: "self", summary: "SUSE CVE CVE-2017-6458 page", url: "https://www.suse.com/security/cve/CVE-2017-6458/", }, { category: "self", summary: "SUSE CVE CVE-2017-6460 page", url: "https://www.suse.com/security/cve/CVE-2017-6460/", }, { category: "self", summary: "SUSE CVE CVE-2017-6462 page", url: "https://www.suse.com/security/cve/CVE-2017-6462/", }, { category: "self", summary: "SUSE CVE CVE-2017-6463 page", url: "https://www.suse.com/security/cve/CVE-2017-6463/", }, { category: "self", summary: "SUSE CVE CVE-2017-6464 page", url: "https://www.suse.com/security/cve/CVE-2017-6464/", }, ], title: "Security update for ntp", tracking: { current_release_date: "2017-04-18T14:06:01Z", generator: { date: "2017-04-18T14:06:01Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2017:1048-1", initial_release_date: "2017-04-18T14:06:01Z", revision_history: [ { date: "2017-04-18T14:06:01Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "ntp-4.2.8p10-60.1.aarch64", product: { name: "ntp-4.2.8p10-60.1.aarch64", product_id: "ntp-4.2.8p10-60.1.aarch64", }, }, { category: "product_version", name: "ntp-doc-4.2.8p10-60.1.aarch64", product: { name: "ntp-doc-4.2.8p10-60.1.aarch64", product_id: "ntp-doc-4.2.8p10-60.1.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "ntp-4.2.8p10-60.1.ppc64le", product: { name: "ntp-4.2.8p10-60.1.ppc64le", product_id: "ntp-4.2.8p10-60.1.ppc64le", }, }, { category: "product_version", name: "ntp-doc-4.2.8p10-60.1.ppc64le", product: { name: "ntp-doc-4.2.8p10-60.1.ppc64le", product_id: "ntp-doc-4.2.8p10-60.1.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "ntp-4.2.8p10-60.1.s390x", product: { name: "ntp-4.2.8p10-60.1.s390x", product_id: "ntp-4.2.8p10-60.1.s390x", }, }, { category: "product_version", name: "ntp-doc-4.2.8p10-60.1.s390x", product: { name: "ntp-doc-4.2.8p10-60.1.s390x", product_id: "ntp-doc-4.2.8p10-60.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "ntp-4.2.8p10-60.1.x86_64", product: { name: "ntp-4.2.8p10-60.1.x86_64", product_id: "ntp-4.2.8p10-60.1.x86_64", }, }, { category: "product_version", name: "ntp-doc-4.2.8p10-60.1.x86_64", product: { name: "ntp-doc-4.2.8p10-60.1.x86_64", product_id: "ntp-doc-4.2.8p10-60.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Desktop 12 SP1", product: { name: "SUSE Linux Enterprise Desktop 12 SP1", product_id: "SUSE Linux Enterprise Desktop 12 SP1", product_identification_helper: { cpe: "cpe:/o:suse:sled:12:sp1", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Desktop 12 SP2", product: { name: "SUSE Linux Enterprise Desktop 12 SP2", product_id: "SUSE Linux Enterprise Desktop 12 SP2", product_identification_helper: { cpe: "cpe:/o:suse:sled:12:sp2", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", product: { name: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", product_identification_helper: { cpe: "cpe:/o:suse:sles:12:sp2", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 12 SP1", product: { name: "SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1", product_identification_helper: { cpe: "cpe:/o:suse:sles:12:sp1", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", product: { name: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:12:sp1", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 12 SP2", product: { name: "SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2", product_identification_helper: { cpe: "cpe:/o:suse:sles:12:sp2", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", product: { name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:12:sp2", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1", product_id: "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", }, product_reference: "ntp-4.2.8p10-60.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1", product_id: "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", }, product_reference: "ntp-doc-4.2.8p10-60.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP1", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2", product_id: "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", }, product_reference: "ntp-4.2.8p10-60.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2", product_id: "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", }, product_reference: "ntp-doc-4.2.8p10-60.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Desktop 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", }, product_reference: "ntp-4.2.8p10-60.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", product_id: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", }, product_reference: "ntp-doc-4.2.8p10-60.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", }, product_reference: "ntp-4.2.8p10-60.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.s390x as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", }, product_reference: "ntp-4.2.8p10-60.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", }, product_reference: "ntp-4.2.8p10-60.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", }, product_reference: "ntp-doc-4.2.8p10-60.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.s390x as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", }, product_reference: "ntp-doc-4.2.8p10-60.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1", product_id: "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", }, product_reference: "ntp-doc-4.2.8p10-60.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", }, product_reference: "ntp-4.2.8p10-60.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", }, product_reference: "ntp-4.2.8p10-60.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", }, product_reference: "ntp-4.2.8p10-60.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", }, product_reference: "ntp-doc-4.2.8p10-60.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", }, product_reference: "ntp-doc-4.2.8p10-60.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", }, product_reference: "ntp-doc-4.2.8p10-60.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", }, product_reference: "ntp-4.2.8p10-60.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", }, product_reference: "ntp-4.2.8p10-60.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.s390x as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", }, product_reference: "ntp-4.2.8p10-60.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", }, product_reference: "ntp-4.2.8p10-60.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", }, product_reference: "ntp-doc-4.2.8p10-60.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", }, product_reference: "ntp-doc-4.2.8p10-60.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.s390x as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", }, product_reference: "ntp-doc-4.2.8p10-60.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2", product_id: "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", }, product_reference: "ntp-doc-4.2.8p10-60.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", }, product_reference: "ntp-4.2.8p10-60.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", }, product_reference: "ntp-4.2.8p10-60.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", }, product_reference: "ntp-4.2.8p10-60.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-60.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", }, product_reference: "ntp-4.2.8p10-60.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", }, product_reference: "ntp-doc-4.2.8p10-60.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", }, product_reference: "ntp-doc-4.2.8p10-60.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", }, product_reference: "ntp-doc-4.2.8p10-60.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-60.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", }, product_reference: "ntp-doc-4.2.8p10-60.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, ], }, vulnerabilities: [ { cve: "CVE-2016-9042", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9042", }, ], notes: [ { category: "general", text: "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9042", url: "https://www.suse.com/security/cve/CVE-2016-9042", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2016-9042", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2016-9042", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2016-9042", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:01Z", details: "moderate", }, ], title: "CVE-2016-9042", }, { cve: "CVE-2017-6451", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6451", }, ], notes: [ { category: "general", text: "The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6451", url: "https://www.suse.com/security/cve/CVE-2017-6451", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6451", url: "https://bugzilla.suse.com/1030050", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:01Z", details: "moderate", }, ], title: "CVE-2017-6451", }, { cve: "CVE-2017-6458", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6458", }, ], notes: [ { category: "general", text: "Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6458", url: "https://www.suse.com/security/cve/CVE-2017-6458", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6458", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6458", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6458", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:01Z", details: "moderate", }, ], title: "CVE-2017-6458", }, { cve: "CVE-2017-6460", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6460", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6460", url: "https://www.suse.com/security/cve/CVE-2017-6460", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6460", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6460", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6460", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:01Z", details: "moderate", }, ], title: "CVE-2017-6460", }, { cve: "CVE-2017-6462", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6462", }, ], notes: [ { category: "general", text: "Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6462", url: "https://www.suse.com/security/cve/CVE-2017-6462", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6462", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6462", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6462", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:01Z", details: "moderate", }, ], title: "CVE-2017-6462", }, { cve: "CVE-2017-6463", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6463", }, ], notes: [ { category: "general", text: "NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6463", url: "https://www.suse.com/security/cve/CVE-2017-6463", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6463", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6463", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6463", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:01Z", details: "moderate", }, ], title: "CVE-2017-6463", }, { cve: "CVE-2017-6464", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6464", }, ], notes: [ { category: "general", text: "NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6464", url: "https://www.suse.com/security/cve/CVE-2017-6464", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6464", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6464", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6464", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:ntp-doc-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-4.2.8p10-60.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.aarch64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.s390x", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:ntp-doc-4.2.8p10-60.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:01Z", details: "moderate", }, ], title: "CVE-2017-6464", }, ], }
suse-su-2017:1047-1
Vulnerability from csaf_suse
Published
2017-04-18 14:06
Modified
2017-04-18 14:06
Summary
Security update for ntp
Notes
Title of the patch
Security update for ntp
Description of the patch
This ntp update to version 4.2.8p10 fixes serveral issues.
This updated enables leap smearing. See
/usr/share/doc/packages/ntp/README.leapsmear for details.
Security issues fixed (bsc#1030050):
- CVE-2017-6464: Denial of Service via Malformed Config
- CVE-2017-6462: Buffer Overflow in DPTS Clock
- CVE-2017-6463: Authenticated DoS via Malicious Config Option
- CVE-2017-6458: Potential Overflows in ctl_put() functions
- CVE-2017-6451: Improper use of snprintf() in mx4200_send()
- CVE-2017-6460: Buffer Overflow in ntpq when fetching reslist
- CVE-2016-9042: 0rigin (zero origin) DoS.
- ntpq_stripquotes() returns incorrect Value
- ereallocarray()/eallocarray() underused
- Copious amounts of Unused Code
- Off-by-one in Oncore GPS Receiver
- Makefile does not enforce Security Flags
Bugfixes:
- Remove spurious log messages (bsc#1014172).
- clang scan-build findings
- Support for openssl-1.1.0 without compatibility modes
- Bugfix 3072 breaks multicastclient
- forking async worker: interrupted pipe I/O
- (...) time_pps_create: Exec format error
- Incorrect Logic for Peer Event Limiting
- Change the process name of forked DNS worker
- Trap Configuration Fail
- Nothing happens if minsane < maxclock < minclock
- allow -4/-6 on restrict line with mask
- out-of-bound pointers in ctl_putsys and decode_bitflags
- Move ntp-kod to /var/lib/ntp, because /var/db is not a standard directory and causes problems for
transactional updates.
Patchnames
SUSE-SLE-SAP-12-2017-612,SUSE-SLE-SERVER-12-2017-612
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for ntp", title: "Title of the patch", }, { category: "description", text: "\nThis ntp update to version 4.2.8p10 fixes serveral issues.\n\nThis updated enables leap smearing. See\n/usr/share/doc/packages/ntp/README.leapsmear for details.\n\nSecurity issues fixed (bsc#1030050):\n\n- CVE-2017-6464: Denial of Service via Malformed Config\n- CVE-2017-6462: Buffer Overflow in DPTS Clock\n- CVE-2017-6463: Authenticated DoS via Malicious Config Option\n- CVE-2017-6458: Potential Overflows in ctl_put() functions\n- CVE-2017-6451: Improper use of snprintf() in mx4200_send()\n- CVE-2017-6460: Buffer Overflow in ntpq when fetching reslist\n- CVE-2016-9042: 0rigin (zero origin) DoS.\n- ntpq_stripquotes() returns incorrect Value\n- ereallocarray()/eallocarray() underused\n- Copious amounts of Unused Code\n- Off-by-one in Oncore GPS Receiver\n- Makefile does not enforce Security Flags\n\nBugfixes:\n\n- Remove spurious log messages (bsc#1014172).\n- clang scan-build findings\n- Support for openssl-1.1.0 without compatibility modes\n- Bugfix 3072 breaks multicastclient\n- forking async worker: interrupted pipe I/O\n- (...) time_pps_create: Exec format error\n- Incorrect Logic for Peer Event Limiting\n- Change the process name of forked DNS worker\n- Trap Configuration Fail\n- Nothing happens if minsane < maxclock < minclock\n- allow -4/-6 on restrict line with mask\n- out-of-bound pointers in ctl_putsys and decode_bitflags\n- Move ntp-kod to /var/lib/ntp, because /var/db is not a standard directory and causes problems for\n transactional updates.\n", title: "Description of the patch", }, { category: "details", text: "SUSE-SLE-SAP-12-2017-612,SUSE-SLE-SERVER-12-2017-612", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1047-1.json", }, { category: "self", summary: "URL for SUSE-SU-2017:1047-1", url: "https://www.suse.com/support/update/announcement/2017/suse-su-20171047-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2017:1047-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2017-April/002811.html", }, { category: "self", summary: "SUSE Bug 1014172", url: "https://bugzilla.suse.com/1014172", }, { category: "self", summary: "SUSE Bug 1030050", url: "https://bugzilla.suse.com/1030050", }, { category: "self", summary: "SUSE CVE CVE-2016-9042 page", url: "https://www.suse.com/security/cve/CVE-2016-9042/", }, { category: "self", summary: "SUSE CVE CVE-2017-6451 page", url: "https://www.suse.com/security/cve/CVE-2017-6451/", }, { category: "self", summary: "SUSE CVE CVE-2017-6458 page", url: "https://www.suse.com/security/cve/CVE-2017-6458/", }, { category: "self", summary: "SUSE CVE CVE-2017-6460 page", url: "https://www.suse.com/security/cve/CVE-2017-6460/", }, { category: "self", summary: "SUSE CVE CVE-2017-6462 page", url: "https://www.suse.com/security/cve/CVE-2017-6462/", }, { category: "self", summary: "SUSE CVE CVE-2017-6463 page", url: "https://www.suse.com/security/cve/CVE-2017-6463/", }, { category: "self", summary: "SUSE CVE CVE-2017-6464 page", url: "https://www.suse.com/security/cve/CVE-2017-6464/", }, ], title: "Security update for ntp", tracking: { current_release_date: "2017-04-18T14:06:17Z", generator: { date: "2017-04-18T14:06:17Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2017:1047-1", initial_release_date: "2017-04-18T14:06:17Z", revision_history: [ { date: "2017-04-18T14:06:17Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "ntp-4.2.8p10-46.23.1.ppc64le", product: { name: "ntp-4.2.8p10-46.23.1.ppc64le", product_id: "ntp-4.2.8p10-46.23.1.ppc64le", }, }, { category: "product_version", name: "ntp-doc-4.2.8p10-46.23.1.ppc64le", product: { name: "ntp-doc-4.2.8p10-46.23.1.ppc64le", product_id: "ntp-doc-4.2.8p10-46.23.1.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "ntp-4.2.8p10-46.23.1.s390x", product: { name: "ntp-4.2.8p10-46.23.1.s390x", product_id: "ntp-4.2.8p10-46.23.1.s390x", }, }, { category: "product_version", name: "ntp-doc-4.2.8p10-46.23.1.s390x", product: { name: "ntp-doc-4.2.8p10-46.23.1.s390x", product_id: "ntp-doc-4.2.8p10-46.23.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "ntp-4.2.8p10-46.23.1.x86_64", product: { name: "ntp-4.2.8p10-46.23.1.x86_64", product_id: "ntp-4.2.8p10-46.23.1.x86_64", }, }, { category: "product_version", name: "ntp-doc-4.2.8p10-46.23.1.x86_64", product: { name: "ntp-doc-4.2.8p10-46.23.1.x86_64", product_id: "ntp-doc-4.2.8p10-46.23.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 12", product: { name: "SUSE Linux Enterprise Server for SAP Applications 12", product_id: "SUSE Linux Enterprise Server for SAP Applications 12", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:12", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 12-LTSS", product: { name: "SUSE Linux Enterprise Server 12-LTSS", product_id: "SUSE Linux Enterprise Server 12-LTSS", product_identification_helper: { cpe: "cpe:/o:suse:sles-ltss:12", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-46.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12", product_id: "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", }, product_reference: "ntp-4.2.8p10-46.23.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-46.23.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12", product_id: "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", }, product_reference: "ntp-doc-4.2.8p10-46.23.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-46.23.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS", product_id: "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", }, product_reference: "ntp-4.2.8p10-46.23.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12-LTSS", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-46.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS", product_id: "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", }, product_reference: "ntp-4.2.8p10-46.23.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12-LTSS", }, { category: "default_component_of", full_product_name: { name: "ntp-4.2.8p10-46.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS", product_id: "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", }, product_reference: "ntp-4.2.8p10-46.23.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12-LTSS", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-46.23.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS", product_id: "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", }, product_reference: "ntp-doc-4.2.8p10-46.23.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12-LTSS", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-46.23.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS", product_id: "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", }, product_reference: "ntp-doc-4.2.8p10-46.23.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12-LTSS", }, { category: "default_component_of", full_product_name: { name: "ntp-doc-4.2.8p10-46.23.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS", product_id: "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", }, product_reference: "ntp-doc-4.2.8p10-46.23.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12-LTSS", }, ], }, vulnerabilities: [ { cve: "CVE-2016-9042", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9042", }, ], notes: [ { category: "general", text: "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9042", url: "https://www.suse.com/security/cve/CVE-2016-9042", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2016-9042", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2016-9042", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2016-9042", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:17Z", details: "moderate", }, ], title: "CVE-2016-9042", }, { cve: "CVE-2017-6451", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6451", }, ], notes: [ { category: "general", text: "The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6451", url: "https://www.suse.com/security/cve/CVE-2017-6451", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6451", url: "https://bugzilla.suse.com/1030050", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:17Z", details: "moderate", }, ], title: "CVE-2017-6451", }, { cve: "CVE-2017-6458", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6458", }, ], notes: [ { category: "general", text: "Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6458", url: "https://www.suse.com/security/cve/CVE-2017-6458", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6458", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6458", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6458", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:17Z", details: "moderate", }, ], title: "CVE-2017-6458", }, { cve: "CVE-2017-6460", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6460", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6460", url: "https://www.suse.com/security/cve/CVE-2017-6460", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6460", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6460", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6460", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:17Z", details: "moderate", }, ], title: "CVE-2017-6460", }, { cve: "CVE-2017-6462", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6462", }, ], notes: [ { category: "general", text: "Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6462", url: "https://www.suse.com/security/cve/CVE-2017-6462", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6462", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6462", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6462", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:17Z", details: "moderate", }, ], title: "CVE-2017-6462", }, { cve: "CVE-2017-6463", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6463", }, ], notes: [ { category: "general", text: "NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6463", url: "https://www.suse.com/security/cve/CVE-2017-6463", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6463", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6463", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6463", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:17Z", details: "moderate", }, ], title: "CVE-2017-6463", }, { cve: "CVE-2017-6464", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6464", }, ], notes: [ { category: "general", text: "NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6464", url: "https://www.suse.com/security/cve/CVE-2017-6464", }, { category: "external", summary: "SUSE Bug 1030050 for CVE-2017-6464", url: "https://bugzilla.suse.com/1030050", }, { category: "external", summary: "SUSE Bug 1038049 for CVE-2017-6464", url: "https://bugzilla.suse.com/1038049", }, { category: "external", summary: "SUSE Bug 1044525 for CVE-2017-6464", url: "https://bugzilla.suse.com/1044525", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.ppc64le", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.s390x", "SUSE Linux Enterprise Server 12-LTSS:ntp-doc-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p10-46.23.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p10-46.23.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2017-04-18T14:06:17Z", details: "moderate", }, ], title: "CVE-2017-6464", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.