NTP was updated to 4.2.8p12 (bsc#1111853) :

CVE-2018-12327: Fixed stack-based buffer overflow in the openhost() command-line call of NTPQ/NTPDC. (bsc#1098531)

CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection (bsc#1083424)

Please also see https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/ for more information.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ntp fixes the following issues: Security issues fixed :

  - CVE-2016-1549: Significant additional protections     against CVE-2016-1549 that was fixed in ntp-4.2.8p7     (bsc#1082210).

  - CVE-2018-7170: Ephemeral association time spoofing     additional protection (bsc#1083424).

  - CVE-2018-7182: Buffer read overrun leads information     leak in ctl_getitem() (bsc#1083426).

  - CVE-2018-7183: decodearr() can write beyond its buffer     limit (bsc#1083417).

  - CVE-2018-7184: Interleaved symmetric mode cannot recover     from bad state (bsc#1083422).

  - CVE-2018-7185: Unauthenticated packet can reset     authenticated interleaved association (bsc#1083420). Bug     fixes :

  - bsc#1077445: Don't use libevent's cached time stamps in     sntp.

  - Disable CMAC in ntp when building against a version of     OpenSSL that doesn't support it.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ntp fixes the following issues :

  - Update to 4.2.8p11 (bsc#1082210) :

  - CVE-2016-1549: Sybil vulnerability: ephemeral     association attack. While fixed in ntp-4.2.8p7, there     are significant additional protections for this issue in     4.2.8p11.

  - CVE-2018-7182: ctl_getitem(): buffer read overrun leads     to undefined behavior and information leak.
    (bsc#1083426)

  - CVE-2018-7170: Multiple authenticated ephemeral     associations. (bsc#1083424)

  - CVE-2018-7184: Interleaved symmetric mode cannot recover     from bad state. (bsc#1083422)

  - CVE-2018-7185: Unauthenticated packet can reset     authenticated interleaved association. (bsc#1083420)

  - CVE-2018-7183: ntpq:decodearr() can write beyond its     buffer limit.(bsc#1083417)

  - Don't use libevent's cached time stamps in sntp.
    (bsc#1077445)

This update was imported from the SUSE:SLE-12-SP1:Update update project.

Ephemeral association time spoofing additional protection

ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549 .(CVE-2018-7170)

Interleaved symmetric mode cannot recover from bad state

ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the 'received' timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704 .(CVE-2018-7184)

Ephemeral association time spoofing

A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim's clock.(CVE-2016-1549)

Buffer read overrun leads information leak in ctl_getitem()

The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10. (CVE-2018-7182)

Unauthenticated packet can reset authenticated interleaved association

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the 'other side' of an interleaved association causing the victim ntpd to reset its association.(CVE-2018-7185)

decodearr() can write beyond its buffer limit

Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.(CVE-2018-7183)

The remote host is affected by the vulnerability described in GLSA-201805-12 (NTP: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in NTP. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code or cause a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update for ntp fixes the following issues :

  - Update to 4.2.8p11 (bsc#1082210) :

  - CVE-2016-1549: Sybil vulnerability: ephemeral     association attack. While fixed in ntp-4.2.8p7, there     are significant additional protections for this issue in     4.2.8p11.

  - CVE-2018-7182: ctl_getitem(): buffer read overrun leads     to undefined behavior and information leak.
    (bsc#1083426)

  - CVE-2018-7170: Multiple authenticated ephemeral     associations. (bsc#1083424)

  - CVE-2018-7184: Interleaved symmetric mode cannot recover     from bad state. (bsc#1083422)

  - CVE-2018-7185: Unauthenticated packet can reset     authenticated interleaved association. (bsc#1083420)

  - CVE-2018-7183: ntpq:decodearr() can write beyond its     buffer limit.(bsc#1083417)

  - Don't use libevent's cached time stamps in sntp.
    (bsc#1077445)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ntp fixes the following issues :

  - Update to 4.2.8p11 (bsc#1082210) :

  - CVE-2016-1549: Sybil vulnerability: ephemeral     association attack. While fixed in ntp-4.2.8p7, there     are significant additional protections for this issue in     4.2.8p11.

  - CVE-2018-7182: ctl_getitem(): buffer read overrun leads     to undefined behavior and information leak.
    (bsc#1083426)

  - CVE-2018-7170: Multiple authenticated ephemeral     associations. (bsc#1083424)

  - CVE-2018-7184: Interleaved symmetric mode cannot recover     from bad state. (bsc#1083422)

  - CVE-2018-7185: Unauthenticated packet can reset     authenticated interleaved association. (bsc#1083420)

  - CVE-2018-7183: ntpq:decodearr() can write beyond its     buffer limit.(bsc#1083417)

  - Don't use libevent's cached time stamps in sntp.
    (bsc#1077445) This update is a reissue of the previous     update with LTSS channels included.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ntp fixes the following issues :

Update to 4.2.8p11 (bsc#1082210) :

  - CVE-2016-1549: Sybil vulnerability: ephemeral     association attack. While fixed in ntp-4.2.8p7, there     are significant additional protections for this issue in     4.2.8p11.

  - CVE-2018-7182: ctl_getitem(): buffer read overrun leads     to undefined behavior and information leak.
    (bsc#1083426)

  - CVE-2018-7170: Multiple authenticated ephemeral     associations. (bsc#1083424)

  - CVE-2018-7184: Interleaved symmetric mode cannot recover     from bad state. (bsc#1083422)

  - CVE-2018-7185: Unauthenticated packet can reset     authenticated interleaved association. (bsc#1083420)

  - CVE-2018-7183: ntpq:decodearr() can write beyond its     buffer limit.(bsc#1083417)

Don't use libevent's cached time stamps in sntp. (bsc#1077445)

This update is a reissue of the previous update with LTSS channels included.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

NTP was updated to 4.2.8p12 (bsc#1111853) :

  - CVE-2018-12327: Fixed stack-based buffer overflow in the     openhost() command-line call of NTPQ/NTPDC.
    (bsc#1098531)

  - CVE-2018-7170: Add further tweaks to improve the fix for     the ephemeral association time spoofing additional     protection (bsc#1083424)

Please also see https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/ for more information.

This update was imported from the SUSE:SLE-15:Update update project.

This update for NTP to version 4.2.8p12 fixes the following vulnerabilities (bsc#1111853) :

  - CVE-2018-12327: Fixed stack-based buffer overflow in the     openhost() command-line call of NTPQ/NTPDC.
    (bsc#1098531)

  - CVE-2018-7170: Add further tweaks to improve the fix for     the ephemeral association time spoofing additional     protection (bsc#1083424)

Please also see https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/ for more information.

This update was imported from the SUSE:SLE-12-SP1:Update update project.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private     symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of     ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for     CVE-2016-1549. (CVE-2018-7170)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
118357	SUSE SLES11 Security Update : ntp (SUSE-SU-2018:3356-1)	Nessus	SuSE Local Security Checks	2018/10/24	2024/7/29	critical
108651	SUSE SLES11 Security Update : ntp (SUSE-SU-2018:0808-1)	Nessus	SuSE Local Security Checks	2018/3/27	2024/12/4	critical
109102	openSUSE Security Update : ntp (openSUSE-2018-376)	Nessus	SuSE Local Security Checks	2018/4/18	2024/10/31	critical
109697	Amazon Linux AMI : ntp (ALAS-2018-1009)	Nessus	Amazon Linux Local Security Checks	2018/5/11	2024/10/9	critical
110176	GLSA-201805-12 : NTP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2018/5/29	2024/9/30	critical
109085	SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2018:0956-1)	Nessus	SuSE Local Security Checks	2018/4/17	2024/10/31	critical
110639	SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2018:1765-1)	Nessus	SuSE Local Security Checks	2018/6/21	2024/9/17	critical
118269	SUSE SLES12 Security Update : ntp (SUSE-SU-2018:1765-2)	Nessus	SuSE Local Security Checks	2018/10/22	2024/7/30	critical
123357	openSUSE Security Update : ntp (openSUSE-2019-856)	Nessus	SuSE Local Security Checks	2019/3/27	2024/6/10	critical
118450	openSUSE Security Update : ntp (openSUSE-2018-1280)	Nessus	SuSE Local Security Checks	2018/10/26	2024/7/29	critical
222620	Linux Distros Unpatched Vulnerability : CVE-2018-7170	Nessus	Misc.	2025/3/4	2025/9/14	medium

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

medium