The remote Fedora 22 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2015-14212 advisory.

    Security fix for CVE-2015-5146, CVE-2015-5194, CVE-2015-5219, CVE-2015-5195, CVE-2015-5196

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of the remote NTP server is 3.x or 4.x prior to 4.2.8p3.
It is, therefore, affected by the following vulnerability :

  - ntpd in ntp before 4.2.8p3 with remote configuration enabled     allows remote authenticated users with knowledge of the     configuration password and access to a computer entrusted to     perform remote configuration to cause a denial of service     (service crash) via a NULL byte in a crafted configuration     directive packet. (CVE-2015-1798)

As discussed upstream, a flaw was found in the way ntpd processed certain remote configuration packets. Note that remote configuration is disabled by default in NTP. (CVE-2015-5146)

It was found that the :config command can be used to set the pidfile and driftfile paths without any restrictions. A remote attacker could use this flaw to overwrite a file on the file system with a file containing the pid of the ntpd process (immediately) or the current estimated drift of the system clock (in hourly intervals).
(CVE-2015-7703)

It was found that ntpd could crash due to an uninitialized variable when processing malformed logconfig configuration commands.
(CVE-2015-5194)

It was found that ntpd exits with a segmentation fault when a statistics type that was not enabled during compilation (e.g.
timingstats) is referenced by the statistics or filegen configuration command. (CVE-2015-5195)

It was discovered that sntp would hang in an infinite loop when a crafted NTP packet was received, related to the conversion of the precision value in the packet to double. (CVE-2015-5219)

A flaw was found in the way the ntp-keygen utility generated MD5 symmetric keys on big-endian systems. An attacker could possibly use this flaw to guess generated MD5 keys, which could then be used to spoof an NTP client or server. (CVE-2015-3405)

The remote Fedora 23 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2015-14213 advisory.

    Security fix for CVE-2015-5146, CVE-2015-5194, CVE-2015-5219, CVE-2015-5195, CVE-2015-5196

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ntp packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets     before updating the 'received' timestamp, which allows     remote attackers to cause a denial of service     (disruption) by sending a packet with a zero-origin     timestamp causing the association to reset and setting     the contents of the packet as the most recent     timestamp. This issue is a result of an incomplete fix     for CVE-2015-7704.(CVE-2018-7184)

  - Buffer overflow in the decodearr function in ntpq in     ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to     execute arbitrary code by leveraging an ntpq query and     sending a response with a crafted array.(CVE-2018-7183)

  - NTP before 4.2.8p6 and 4.3.x before 4.3.90, when     configured in broadcast mode, allows man-in-the-middle     attackers to conduct replay attacks by sniffing the     network.(CVE-2015-7973)

  - ntpd in ntp before 4.2.8p3 with remote configuration     enabled allows remote authenticated users with     knowledge of the configuration password and access to a     computer entrusted to perform remote configuration to     cause a denial of service (service crash) via a NULL     byte in a crafted configuration directive     packet.(CVE-2015-5146)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Fedora 21 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2015-77bfbc1bcd advisory.

    Security fix for CVE-2015-7704, CVE-2015-5300, CVE-2015-7692, CVE-2015-7871, CVE-2015-7702, CVE-2015-7691,     CVE-2015-7852, CVE-2015-7701

    ----

    Security fix for CVE-2015-5146, CVE-2015-5194, CVE-2015-5219, CVE-2015-5195, CVE-2015-5196

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
86331	Fedora 22 : ntp (2015-14212)	Nessus	Fedora Local Security Checks	2015/10/12	2025/8/29	high
121310	Network Time Protocol Daemon (ntpd) 3.x / 4.x < 4.2.8p3 Denial Of Service Vulnerability	Nessus	Misc.	2019/1/22	2025/3/21	medium
85751	Amazon Linux AMI : ntp (ALAS-2015-593)	Nessus	Amazon Linux Local Security Checks	2015/9/3	2020/6/22	high
86027	Fedora 23 : ntp (2015-14213)	Nessus	Fedora Local Security Checks	2015/9/21	2025/8/29	high
134499	EulerOS Virtualization for ARM 64 3.0.2.0 : ntp (EulerOS-SA-2020-1210)	Nessus	Huawei Local Security Checks	2020/3/13	2024/3/22	critical
89288	Fedora 21 : ntp (2015-77bfbc1bcd)	Nessus	Fedora Local Security Checks	2016/3/4	2025/8/29	critical

检测

插件搜索

high

medium

high

high

critical

critical