CVE-2015-5146
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.9%
ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a computer entrusted to perform remote configuration to cause a denial of service (service crash) via a NULL byte in a crafted configuration directive packet.
Produtos afetados
n/a · n/aReferências
http://bugs.ntp.org/show_bug.cgi?id=2853http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-September/166992.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=1238136https://security.gentoo.org/glsa/201509-01https://security.netapp.com/advisory/ntap-20180731-0003/http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secuhttp://www.debian.org/security/2015/dsa-3388http://www.securityfocus.com/bid/75589http://www.securitytracker.com/id/1034168