According to the versions of the ntp packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The monlist feature in ntp_request.c in ntpd in NTP     before 4.2.7p26 allows remote attackers to cause a     denial of service (traffic amplification) via forged     (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests,     as exploited in the wild in December     2013.(CVE-2013-5211)

  - The broadcast mode replay prevention functionality in     ntpd in NTP before 4.2.8p9 allows remote attackers to     cause a denial of service (reject broadcast mode     packets) via a crafted broadcast mode     packet.(CVE-2016-7427)

  - ntpd in NTP before 4.2.8p9 allows remote attackers to     cause a denial of service (reject broadcast mode     packets) via the poll interval in a broadcast     packet.(CVE-2016-7428)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of ntp installed on the remote host is prior to 4.2.8p15-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1706 advisory.

    The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a     denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1     requests, as exploited in the wild in December 2013. (CVE-2013-5211)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3612 advisory.

    [4.2.6p5-22.0.1.el7_2.2]
    - add disable monitor to default ntp.conf [CVE-2013-5211]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote VMware ESXi host is version 5.5 prior to build 1623387. It is, therefore, affected by multiple vulnerabilities :

  - Multiple integer overflow conditions exist in the     bundled GNU C Library (glibc) due to improper validation     of user-supplied input. A remote attacker can exploit     these issues to cause a buffer overflow, resulting in a     denial of service condition. (CVE-2013-4332)

  - A flaw exists in the monlist feature in NTP. A remote     attacker can exploit this flaw, using a specially     crafted packet to load the query function in monlist, to     conduct a distributed denial of service attack.
    (CVE-2013-5211)

The remote VMware ESXi host is version 5.1 prior to build 1743201. It is, therefore, affected by multiple vulnerabilities :

  - A flaw exists in the monlist feature in NTP. A remote     attacker can exploit this flaw, using a specially     crafted packet to load the query function in monlist, to     conduct a distributed denial of service attack.
    (CVE-2013-5211)

  - An unspecified privilege escalation vulnerability exists     that allows an attacker to gain host OS privileges or     cause a denial of service condition by modifying a     configuration file. (CVE-2014-8370)

  - A flaw exists in the VMware Authorization process     (vmware-authd) due to improper validation of     user-supplied input. A remote attacker can exploit this     to cause a denial of service condition. (CVE-2015-1044)

The monlist feature in ntpd in NTP allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests.

According to the versions of the ntp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The monlist feature in ntp_request.c in ntpd in NTP     before 4.2.7p26 allows remote attackers to cause a     denial of service (traffic amplification) via forged     (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests,     as exploited in the wild in December     2013.(CVE-2013-5211)

  - The broadcast mode replay prevention functionality in     ntpd in NTP before 4.2.8p9 allows remote attackers to     cause a denial of service (reject broadcast mode     packets) via a crafted broadcast mode     packet.(CVE-2016-7427)

  - ntpd in NTP before 4.2.8p9 allows remote attackers to     cause a denial of service (reject broadcast mode     packets) via the poll interval in a broadcast     packet.(CVE-2016-7428)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote VMware ESXi host is version 5.0 prior to build 1749766. It is, therefore, affected by multiple vulnerabilities :

  - A flaw exists in the monlist feature in NTP. A remote     attacker can exploit this flaw, using a specially     crafted packet to load the query function in monlist, to     conduct a distributed denial of service attack.
    (CVE-2013-5211)

  - An unspecified privilege escalation vulnerability exists     that allows an attacker to gain host OS privileges or     cause a denial of service condition by modifying a     configuration file. (CVE-2014-8370)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3613 advisory.

    [4.2.6p5-10.0.1.el6_8.1]
    - add disable monitor to default ntp.conf [CVE-2013-5211]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the remote pfSense install is prior to 2.1.1. It is, therefore, affected by multiple vulnerabilities as stated in the referenced vendor advisories.

a. DDoS vulnerability in NTP third-party libraries

   The NTP daemon has a DDoS vulnerability in the handling of the    'monlist' command. An attacker may send a forged request to a    vulnerable NTP server resulting in an amplified response to the    intended target of the DDoS attack.       Mitigation

   Mitigation for this issue is documented in VMware Knowledge Base    article 2070193. This article also documents when vSphere    products are affected.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2013-5211 to this issue.

  b. Update to ESXi glibc package

  The ESXi glibc package is updated to version   glibc-2.5-118.el5_10.2 to resolve a security issue.

  The Common Vulnerabilities and Exposures project (cve.mitre.org)   has assigned the name CVE-2013-4332 to this issue.

  c. vCenter and Update Manager, Oracle JRE 1.7 Update 45      Oracle JRE is updated to version JRE 1.7 Update 45, which   addresses multiple security issues that existed in earlier   releases of Oracle JRE. 

  Oracle has documented the CVE identifiers that are addressed   in JRE 1.7.0 update 45 in the Oracle Java SE Critical Patch   Update Advisory of October 2013. The References section provides   a link to this advisory.

The NTP time service could have been used for remote denial of service amplification attacks.

This issue can be fixed by the administrator as we described in our security advisory SUSE-SA:2014:001:
http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00005.
html

and on

http://support.novell.com/security/cve/CVE-2013-5211.html

This update now also replaces the default ntp.conf template to fix this problem.

Please note that if you have touched or modified ntp.conf yourself, it will not be automatically fixed, you need to merge the changes manually as described.

Additionally the following bug has been fixed :

  - ntp start script does not update the     /var/lib/ntp/etc/localtime file if /etc/localtime is a     symlink (bnc#838458)

The remote VMware ESX / ESXi host is affected by multiple vulnerabilities :

  - Multiple integer overflow conditions exist in the glibc     package in file malloc/malloc.c. An unauthenticated,     remote attacker can exploit these to cause heap memory     corruption by passing large values to the pvalloc(),     valloc(), posix_memalign(), memalign(), or     aligned_alloc() functions, resulting in a denial of     service. (CVE-2013-4332)

  - A distributed denial of service (DDoS) vulnerability     exists in the NTP daemon due to improper handling of the     'monlist' command. A remote attacker can exploit this,     via a forged request to an affected NTP server, to cause     an amplified response to the intended target of the DDoS     attack. (CVE-2013-5211)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA11171 advisory.

  - The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or     unset traps via a crafted control mode packet. (CVE-2016-9310)

  - The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a     denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1     requests, as exploited in the wild in December 2013. (CVE-2013-5211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
136250	EulerOS Virtualization for ARM 64 3.0.2.0 : ntp (EulerOS-SA-2020-1547)	Nessus	Huawei Local Security Checks	2020/5/1	2024/3/13	medium
153422	Amazon Linux 2 : ntp (ALAS-2021-1706)	Nessus	Amazon Linux Local Security Checks	2021/9/16	2024/12/11	high
93448	Oracle Linux 7 : ntp (ELSA-2016-3612)	Nessus	Oracle Linux Local Security Checks	2016/9/13	2024/10/22	high
83781	ESXi 5.5 < Build 1623387 Multiple Vulnerabilities (remote check)	Nessus	Misc.	2015/5/22	2018/8/6	medium
81084	ESXi 5.1 < Build 1743201 Multiple Vulnerabilities (remote check)	Nessus	Misc.	2015/1/29	2019/9/24	medium
76074	AIX 7.1 TL 2 : ntp (IV55365)	Nessus	AIX Local Security Checks	2014/6/17	2023/4/21	medium
76080	AIX 5.3 TL 12 : ntp (IV59636)	Nessus	AIX Local Security Checks	2014/6/17	2023/4/21	medium
141678	EulerOS Virtualization 3.0.2.2 : ntp (EulerOS-SA-2020-2225)	Nessus	Huawei Local Security Checks	2020/10/21	2022/5/11	medium
81083	ESXi 5.0 < Build 1749766 Multiple Vulnerabilities (remote check)	Nessus	Misc.	2015/1/29	2019/9/24	medium
76079	AIX 6.1 TL 7 : ntp (IV58413)	Nessus	AIX Local Security Checks	2014/6/17	2023/4/21	medium
93449	Oracle Linux 6 : ntp (ELSA-2016-3613)	Nessus	Oracle Linux Local Security Checks	2016/9/13	2024/10/22	high
106488	pfSense < 2.1.1 Multiple Vulnerabilities (SA-14_02 / SA-14_03)	Nessus	Firewalls	2018/1/31	2019/11/8	high
72958	VMSA-2014-0002 : VMware vSphere updates to third-party libraries	Nessus	VMware ESX Local Security Checks	2014/3/12	2021/1/6	medium
76910	SuSE 11.3 Security Update : ntp (SAT Patch Number 9540)	Nessus	SuSE Local Security Checks	2014/7/30	2021/1/19	medium
76077	AIX 7.1 TL 1 : ntp (IV56575)	Nessus	AIX Local Security Checks	2014/6/17	2023/4/21	medium
87674	VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2014-0002)	Nessus	Misc.	2015/12/30	2021/1/6	medium
148645	Juniper Junos OS Multiple Vulnerabilities (JSA11171)	Nessus	Junos Local Security Checks	2021/4/15	2021/4/19	medium

检测

插件搜索

medium

high

high

medium

medium

medium

medium

medium

medium

medium

high

high

medium

medium

medium

medium

medium