Security fix for CVE-2015-7974, CVE-2015-8138, CVE-2015-7977, CVE-2015-7978, CVE-2015-7979, CVE-2015-8158 ---- Security fix for CVE-2015-7704, CVE-2015-5300, CVE-2015-7692, CVE-2015-7871, CVE-2015-7702, CVE-2015-7691, CVE-2015-7852, CVE-2015-7701

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ntp was updated to version 4.2.8p6 to fix 12 security issues.

Also yast2-ntp-client was updated to match some sntp syntax changes.
(bsc#937837)

These security issues were fixed :

  - CVE-2015-8158: Fixed potential infinite loop in ntpq     (bsc#962966).

  - CVE-2015-8138: Zero Origin Timestamp Bypass     (bsc#963002).

  - CVE-2015-7979: Off-path Denial of Service (DoS) attack     on authenticated broadcast mode (bsc#962784).

  - CVE-2015-7978: Stack exhaustion in recursive traversal     of restriction list (bsc#963000).

  - CVE-2015-7977: reslist NULL pointer dereference     (bsc#962970).

  - CVE-2015-7976: ntpq saveconfig command allows dangerous     characters in filenames (bsc#962802).

  - CVE-2015-7975: nextvar() missing length check     (bsc#962988).

  - CVE-2015-7974: Skeleton Key: Missing key check allows     impersonation between authenticated peers (bsc#962960).

  - CVE-2015-7973: Replay attack on authenticated broadcast     mode (bsc#962995).

  - CVE-2015-8140: ntpq vulnerable to replay attacks     (bsc#962994).

  - CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose     origin (bsc#962997).

  - CVE-2015-5300: MITM attacker could have forced ntpd to     make a step larger than the panic threshold     (bsc#951629).

These non-security issues were fixed :

  - fate#320758 bsc#975981: Enable compile-time support for     MS-SNTP (--enable-ntp-signd). This replaces the w32     patches in 4.2.4 that added the authreg directive.

  - bsc#962318: Call /usr/sbin/sntp with full path to     synchronize in start-ntpd. When run as cron job,     /usr/sbin/ is not in the path, which caused the     synchronization to fail.

  - bsc#782060: Speedup ntpq.

  - bsc#916617: Add /var/db/ntp-kod.

  - bsc#956773: Add ntp-ENOBUFS.patch to limit a warning     that might happen quite a lot on loaded systems.

  - bsc#951559,bsc#975496: Fix the TZ offset output of sntp     during DST.

  - Add ntp-fork.patch and build with threads disabled to     allow name resolution even when running chrooted.

This update was imported from the SUSE:SLE-12-SP1:Update update project.

The version of NTP installed on the remote AIX host is affected by the following vulnerabilities :

  - A flaw exists in the receive() function due to the use     of authenticated broadcast mode. A man-in-the-middle     attacker can exploit this to conduct a replay attack.
    (CVE-2015-7973)

  - A NULL pointer dereference flaw exists in ntp_request.c     that is triggered when handling ntpdc relist commands.
    A remote attacker can exploit this, via a specially     crafted request, to crash the service, resulting in a     denial of service condition. (CVE-2015-7977)

  - An unspecified flaw exists in authenticated broadcast     mode. A remote attacker can exploit this, via specially     crafted packets, to cause a denial of service condition.
    (CVE-2015-7979)

  - A flaw exists in ntpq and ntpdc that allows a remote     attacker to disclose sensitive information in     timestamps. (CVE-2015-8139)

  - A flaw exists in the ntpq protocol that is triggered     during the handling of an improper sequence of numbers.
    A man-in-the-middle attacker can exploit this to conduct     a replay attack. (CVE-2015-8140)

  - A flaw exists in the ntpq client that is triggered when     handling packets that cause a loop in the getresponse()     function. A remote attacker can exploit this to cause an     infinite loop, resulting in a denial of service     condition. (CVE-2015-8158)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:2583 advisory.

    The Network Time Protocol (NTP) is used to synchronize a computer's time with another referenced time     source. These packages include the ntpd service which continuously adjusts system time and utilities used     to query and configure the ntpd service.

    Security Fix(es):

    * It was found that the fix for CVE-2014-9750 was incomplete: three issues were found in the value length     checks in NTP's ntp_crypto.c, where a packet with particular autokey operations that contained malicious     data was not always being completely validated. A remote attacker could use a specially crafted NTP packet     to crash ntpd. (CVE-2015-7691, CVE-2015-7692, CVE-2015-7702)

    * A memory leak flaw was found in ntpd's CRYPTO_ASSOC. If ntpd was configured to use autokey     authentication, an attacker could send packets to ntpd that would, after several days of ongoing attack,     cause it to run out of memory. (CVE-2015-7701)

    * An off-by-one flaw, leading to a buffer overflow, was found in cookedprint functionality of ntpq. A     specially crafted NTP packet could potentially cause ntpq to crash. (CVE-2015-7852)

    * A NULL pointer dereference flaw was found in the way ntpd processed 'ntpdc reslist' commands that     queried restriction lists with a large amount of entries. A remote attacker could potentially use this     flaw to crash ntpd. (CVE-2015-7977)

    * A stack-based buffer overflow flaw was found in the way ntpd processed 'ntpdc reslist' commands that     queried restriction lists with a large amount of entries. A remote attacker could use this flaw to crash     ntpd. (CVE-2015-7978)

    * It was found that when NTP was configured in broadcast mode, a remote attacker could broadcast packets     with bad authentication to all clients. The clients, upon receiving the malformed packets, would break the     association with the broadcast server, causing them to become out of sync over a longer period of time.
    (CVE-2015-7979)

    * It was found that ntpd could crash due to an uninitialized variable when processing malformed logconfig     configuration commands. (CVE-2015-5194)

    * It was found that ntpd would exit with a segmentation fault when a statistics type that was not enabled     during compilation (e.g. timingstats) was referenced by the statistics or filegen configuration command.
    (CVE-2015-5195)

    * It was found that NTP's :config command could be used to set the pidfile and driftfile paths without any     restrictions. A remote attacker could use this flaw to overwrite a file on the file system with a file     containing the pid of the ntpd process (immediately) or the current estimated drift of the system clock     (in hourly intervals). (CVE-2015-5196, CVE-2015-7703)

    * It was discovered that the sntp utility could become unresponsive due to being caught in an infinite     loop when processing a crafted NTP packet. (CVE-2015-5219)

    * A flaw was found in the way NTP verified trusted keys during symmetric key authentication. An     authenticated client (A) could use this flaw to modify a packet sent between a server (B) and a client (C)     using a key that is different from the one known to the client (A). (CVE-2015-7974)

    * A flaw was found in the way the ntpq client processed certain incoming packets in a loop in the     getresponse() function. A remote attacker could potentially use this flaw to crash an ntpq client     instance. (CVE-2015-8158)

    The CVE-2015-5219 and CVE-2015-7703 issues were discovered by Miroslav Lichvr (Red Hat).

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of the remote NTP server is 3.x or 4.x prior to 4.2.8p6.
It is, therefore, affected by the following vulnerabilities :

  - A flaw exists in the receive() function due to the use     of authenticated broadcast mode. A man-in-the-middle     attacker can exploit this to conduct a replay attack.
    (CVE-2015-7973)

  - A time serving flaw exists in the trusted key system     due to improper key checks. An authenticated, remote     attacker can exploit this to perform impersonation     attacks between authenticated peers. (CVE-2015-7974)

  - An overflow condition exists in the nextvar() function     due to improper validation of user-supplied input. A     local attacker can exploit this to cause a buffer     overflow, resulting in a denial of service condition.
    (CVE-2015-7975)

  - A flaw exists in ntp_control.c due to improper filtering     of special characters in filenames by the saveconfig     command. An authenticated, remote attacker can exploit     this to inject arbitrary content. (CVE-2015-7976)

  - A NULL pointer dereference flaw exists in ntp_request.c     that is triggered when handling ntpdc relist commands.
    A remote attacker can exploit this, via a specially     crafted request, to crash the service, resulting in a     denial of service condition. (CVE-2015-7977)

  - A flaw exists in ntpdc that is triggered during the     handling of the relist command. A remote attacker can     exploit this, via recursive traversals of the     restriction list, to exhaust available space on the call     stack, resulting in a denial of service condition.
    CVE-2015-7978)

  - An unspecified flaw exists in authenticated broadcast     mode. A remote attacker can exploit this, via specially     crafted packets, to cause a denial of service condition.
    (CVE-2015-7979)

  - A flaw exists in the receive() function that allows     packets with an origin timestamp of zero to bypass     security checks. A remote attacker can exploit this to     spoof arbitrary content. (CVE-2015-8138)

  - A flaw exists in ntpq and ntpdc that allows a remote     attacker to disclose sensitive information in     timestamps. (CVE-2015-8139)

  - A flaw exists in the ntpq protocol that is triggered     during the handling of an improper sequence of numbers.
    A man-in-the-middle attacker can exploit this to conduct     a replay attack. (CVE-2015-8140)

  - A flaw exists in the ntpq client that is triggered when     handling packets that cause a loop in the getresponse()     function. A remote attacker can exploit this to cause an     infinite loop, resulting in a denial of service     condition. (CVE-2015-8158)

Network Time Foundation reports :

NTF's NTP Project has been notified of the following low- and medium-severity vulnerabilities that are fixed in ntp-4.2.8p6, released on Tuesday, 19 January 2016 :

- Bug 2948 / CVE-2015-8158: Potential Infinite Loop in ntpq. Reported by Cisco ASIG.

- Bug 2945 / CVE-2015-8138: origin: Zero Origin Timestamp Bypass.
Reported by Cisco ASIG.

- Bug 2942 / CVE-2015-7979: Off-path Denial of Service (DoS) attack on authenticated broadcast mode. Reported by Cisco ASIG.

- Bug 2940 / CVE-2015-7978: Stack exhaustion in recursive traversal of restriction list. Reported by Cisco ASIG.

- Bug 2939 / CVE-2015-7977: reslist NULL pointer dereference. Reported by Cisco ASIG.

- Bug 2938 / CVE-2015-7976: ntpq saveconfig command allows dangerous characters in filenames. Reported by Cisco ASIG.

- Bug 2937 / CVE-2015-7975: nextvar() missing length check. Reported by Cisco ASIG.

- Bug 2936 / CVE-2015-7974: Skeleton Key: Missing key check allows impersonation between authenticated peers. Reported by Cisco ASIG.

- Bug 2935 / CVE-2015-7973: Deja Vu: Replay attack on authenticated broadcast mode. Reported by Cisco ASIG.

Additionally, mitigations are published for the following two issues :

- Bug 2947 / CVE-2015-8140: ntpq vulnerable to replay attacks.
Reported by Cisco ASIG.

- Bug 2946 / CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin. Reported by Cisco ASIG.

ntp was updated to version 4.2.8p6 to fix 28 security issues.

Major functional changes :

  - The 'sntp' commandline tool changed its option handling     in a major way, some options have been renamed or     dropped.

  - 'controlkey 1' is added during update to ntp.conf to     allow sntp to work.

  - The local clock is being disabled during update.

  - ntpd is no longer running chrooted.

Other functional changes :

  - ntp-signd is installed.

  - 'enable mode7' can be added to the configuration to     allow ntdpc to work as compatibility mode option.

  - 'kod' was removed from the default restrictions.

  - SHA1 keys are used by default instead of MD5 keys.

Also yast2-ntp-client was updated to match some sntp syntax changes.
(bsc#937837)

These security issues were fixed :

  - CVE-2015-8158: Fixed potential infinite loop in ntpq     (bsc#962966).

  - CVE-2015-8138: Zero Origin Timestamp Bypass     (bsc#963002).

  - CVE-2015-7979: Off-path Denial of Service (DoS) attack     on authenticated broadcast mode (bsc#962784).

  - CVE-2015-7978: Stack exhaustion in recursive traversal     of restriction list (bsc#963000).

  - CVE-2015-7977: reslist NULL pointer dereference     (bsc#962970).

  - CVE-2015-7976: ntpq saveconfig command allows dangerous     characters in filenames (bsc#962802).

  - CVE-2015-7975: nextvar() missing length check     (bsc#962988).

  - CVE-2015-7974: Skeleton Key: Missing key check allows     impersonation between authenticated peers (bsc#962960).

  - CVE-2015-7973: Replay attack on authenticated broadcast     mode (bsc#962995).

  - CVE-2015-8140: ntpq vulnerable to replay attacks     (bsc#962994).

  - CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose     origin (bsc#962997).

  - CVE-2015-5300: MITM attacker could have forced ntpd to     make a step larger than the panic threshold     (bsc#951629).

  - CVE-2015-7871: NAK to the Future: Symmetric association     authentication bypass via crypto-NAK (bsc#951608).

  - CVE-2015-7855: decodenetnum() will ASSERT botch instead     of returning FAIL on some bogus values (bsc#951608).

  - CVE-2015-7854: Password Length Memory Corruption     Vulnerability (bsc#951608).

  - CVE-2015-7853: Invalid length data provided by a custom     refclock driver could cause a buffer overflow     (bsc#951608).

  - CVE-2015-7852: ntpq atoascii() Memory Corruption     Vulnerability (bsc#951608).

  - CVE-2015-7851: saveconfig Directory Traversal     Vulnerability (bsc#951608).

  - CVE-2015-7850: remote config logfile-keyfile     (bsc#951608).

  - CVE-2015-7849: trusted key use-after-free (bsc#951608).

  - CVE-2015-7848: mode 7 loop counter underrun     (bsc#951608).

  - CVE-2015-7701: Slow memory leak in CRYPTO_ASSOC     (bsc#951608).

  - CVE-2015-7703: configuration directives 'pidfile' and     'driftfile' should only be allowed locally (bsc#951608).

  - CVE-2015-7704, CVE-2015-7705: Clients that receive a KoD     should validate the origin timestamp field (bsc#951608).

  - CVE-2015-7691, CVE-2015-7692, CVE-2015-7702: Incomplete     autokey data packet length checks (bsc#951608).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This network time protocol server ntp was updated to 4.2.8p6 to fix the following issues :

Also yast2-ntp-client was updated to match some sntp syntax changes.
(bsc#937837)

Major functional changes :

  - The 'sntp' commandline tool changed its option handling     in a major way.

  - 'controlkey 1' is added during update to ntp.conf to     allow sntp to work.

  - The local clock is being disabled during update.

  - ntpd is no longer running chrooted.

Other functional changes :

  - ntp-signd is installed.

  - 'enable mode7' can be added to the configuration to     allow ntdpc to work as compatibility mode option.

  - 'kod' was removed from the default restrictions.

  - SHA1 keys are used by default instead of MD5 keys.

These security issues were fixed :

  - CVE-2015-5219: An endless loop due to incorrect     precision to double conversion (bsc#943216).

  - CVE-2015-8158: Fixed potential infinite loop in ntpq     (bsc#962966).

  - CVE-2015-8138: Zero Origin Timestamp Bypass     (bsc#963002).

  - CVE-2015-7979: Off-path Denial of Service (DoS) attack     on authenticated broadcast mode (bsc#962784).

  - CVE-2015-7978: Stack exhaustion in recursive traversal     of restriction list (bsc#963000).

  - CVE-2015-7977: reslist NULL pointer dereference     (bsc#962970).

  - CVE-2015-7976: ntpq saveconfig command allows dangerous     characters in filenames (bsc#962802).

  - CVE-2015-7975: nextvar() missing length check     (bsc#962988).

  - CVE-2015-7974: Skeleton Key: Missing key check allows     impersonation between authenticated peers (bsc#962960).

  - CVE-2015-7973: Replay attack on authenticated broadcast     mode (bsc#962995).

  - CVE-2015-8140: ntpq vulnerable to replay attacks     (bsc#962994).

  - CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose     origin (bsc#962997).

  - CVE-2015-5300: MITM attacker could have forced ntpd to     make a step larger than the panic threshold     (bsc#951629).

  - CVE-2015-7871: NAK to the Future: Symmetric association     authentication bypass via crypto-NAK (bsc#951608).

  - CVE-2015-7855: decodenetnum() will ASSERT botch instead     of returning FAIL on some bogus values (bsc#951608).

  - CVE-2015-7854: Password Length Memory Corruption     Vulnerability (bsc#951608).

  - CVE-2015-7853: Invalid length data provided by a custom     refclock driver could cause a buffer overflow     (bsc#951608).

  - CVE-2015-7852: ntpq atoascii() Memory Corruption     Vulnerability (bsc#951608).

  - CVE-2015-7851: saveconfig Directory Traversal     Vulnerability (bsc#951608).

  - CVE-2015-7850: remote config logfile-keyfile     (bsc#951608).

  - CVE-2015-7849: trusted key use-after-free (bsc#951608).

  - CVE-2015-7848: mode 7 loop counter underrun     (bsc#951608).

  - CVE-2015-7701: Slow memory leak in CRYPTO_ASSOC     (bsc#951608).

  - CVE-2015-7703: configuration directives 'pidfile' and     'driftfile' should only be allowed locally (bsc#951608).

  - CVE-2015-7704, CVE-2015-7705: Clients that receive a KoD     should validate the origin timestamp field (bsc#951608).

  - CVE-2015-7691, CVE-2015-7692, CVE-2015-7702: Incomplete     autokey data packet length checks (bsc#951608).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities were discovered in the Network Time Protocol daemon and utility programs :

  - CVE-2015-7974     Matt Street discovered that insufficient key validation     allows impersonation attacks between authenticated     peers.

  - CVE-2015-7977 CVE-2015-7978     Stephen Gray discovered that a NULL pointer dereference     and a buffer overflow in the handling of 'ntpdc reslist'     commands may result in denial of service.

  - CVE-2015-7979     Aanchal Malhotra discovered that if NTP is configured     for broadcast mode, an attacker can send malformed     authentication packets which break associations with the     server for other broadcast clients.

  - CVE-2015-8138     Matthew van Gundy and Jonathan Gardner discovered that     missing validation of origin timestamps in ntpd clients     may result in denial of service.

  - CVE-2015-8158     Jonathan Gardner discovered that missing input     sanitising in ntpq may result in denial of service.

  - CVE-2016-1547     Stephen Gray and Matthew van Gundy discovered that     incorrect handling of crypto NAK packets may result in     denial of service.

  - CVE-2016-1548     Jonathan Gardner and Miroslav Lichvar discovered that     ntpd clients could be forced to change from basic     client/server mode to interleaved symmetric mode,     preventing time synchronisation.

  - CVE-2016-1550     Matthew van Gundy, Stephen Gray and Loganaden Velvindron     discovered that timing leaks in the packet     authentication code could result in recovery of a     message digest.

  - CVE-2016-2516     Yihan Lian discovered that duplicate IPs on 'unconfig'     directives will trigger an assert.

  - CVE-2016-2518     Yihan Lian discovered that an OOB memory access could     potentially crash ntpd.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3096-1 advisory.

    Aanchal Malhotra discovered that NTP incorrectly handled authenticated broadcast mode. A remote attacker     could use this issue to perform a replay attack. (CVE-2015-7973)

    Matt Street discovered that NTP incorrectly verified peer associations of symmetric keys. A remote     attacker could use this issue to perform an impersonation attack. (CVE-2015-7974)

    Jonathan Gardner discovered that the NTP ntpq utility incorrectly handled memory. An attacker could     possibly use this issue to cause ntpq to crash, resulting in a denial of service. This issue only affected     Ubuntu 16.04 LTS. (CVE-2015-7975)

    Jonathan Gardner discovered that the NTP ntpq utility incorrectly handled dangerous characters in     filenames. An attacker could possibly use this issue to overwrite arbitrary files. (CVE-2015-7976)

    Stephen Gray discovered that NTP incorrectly handled large restrict lists. An attacker could use this     issue to cause NTP to crash, resulting in a denial of service. (CVE-2015-7977, CVE-2015-7978)

    Aanchal Malhotra discovered that NTP incorrectly handled authenticated broadcast mode. A remote attacker     could use this issue to cause NTP to crash, resulting in a denial of service. (CVE-2015-7979)

    Jonathan Gardner discovered that NTP incorrectly handled origin timestamp checks. A remote attacker could     use this issue to spoof peer servers. (CVE-2015-8138)

    Jonathan Gardner discovered that the NTP ntpq utility did not properly handle certain incorrect values. An     attacker could possibly use this issue to cause ntpq to hang, resulting in a denial of service.
    (CVE-2015-8158)

    It was discovered that the NTP cronjob incorrectly cleaned up the statistics directory. A local attacker     could possibly use this to escalate privileges. (CVE-2016-0727)

    Stephen Gray and Matthew Van Gundy discovered that NTP incorrectly validated crypto-NAKs. A remote     attacker could possibly use this issue to prevent clients from synchronizing. (CVE-2016-1547)

    Miroslav Lichvar and Jonathan Gardner discovered that NTP incorrectly handled switching to interleaved     symmetric mode. A remote attacker could possibly use this issue to prevent clients from synchronizing.
    (CVE-2016-1548)

    Matthew Van Gundy, Stephen Gray and Loganaden Velvindron discovered that NTP incorrectly handled message     authentication. A remote attacker could possibly use this issue to recover the message digest key.
    (CVE-2016-1550)

    Yihan Lian discovered that NTP incorrectly handled duplicate IPs on unconfig directives. An authenticated     remote attacker could possibly use this issue to cause NTP to crash, resulting in a denial of service.
    (CVE-2016-2516)

    Yihan Lian discovered that NTP incorrectly handled certail peer associations. A remote attacker could     possibly use this issue to cause NTP to crash, resulting in a denial of service. (CVE-2016-2518)

    Jakub Prokes discovered that NTP incorrectly handled certain spoofed packets. A remote attacker could     possibly use this issue to cause a denial of service. (CVE-2016-4954)

    Miroslav Lichvar discovered that NTP incorrectly handled certain packets when autokey is enabled. A remote     attacker could possibly use this issue to cause a denial of service. (CVE-2016-4955)

    Miroslav Lichvar discovered that NTP incorrectly handled certain spoofed broadcast packets. A remote     attacker could possibly use this issue to cause a denial of service. (CVE-2016-4956)

    In the default installation, attackers would be isolated by the NTP AppArmor profile.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
89510	Fedora 22 : ntp-4.2.6p5-36.fc22 (2016-34bc10a2c8)	Nessus	Fedora Local Security Checks	2016/3/4	2021/1/11	critical
91111	openSUSE Security Update : ntp (openSUSE-2016-578)	Nessus	SuSE Local Security Checks	2016/5/13	2021/1/19	high
92357	AIX NTP v4 Advisory : ntp_advisory6.asc (IV83983) (IV83992)	Nessus	AIX Local Security Checks	2016/7/18	2026/1/30	medium
94546	RHEL 7 : ntp (RHSA-2016:2583)	Nessus	Red Hat Local Security Checks	2016/11/4	2025/8/29	high
88054	Network Time Protocol Daemon (ntpd) 3.x / 4.x < 4.2.8p6 Multiple Vulnerabilities	Nessus	Misc.	2016/1/21	2025/2/18	medium
88068	FreeBSD : ntp -- multiple vulnerabilities (5237f5d7-c020-11e5-b397-d050996490d0)	Nessus	FreeBSD Local Security Checks	2016/1/22	2021/1/4	high
90991	SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2016:1247-1)	Nessus	SuSE Local Security Checks	2016/5/9	2021/1/6	critical
91248	SUSE SLES11 Security Update : ntp (SUSE-SU-2016:1311-1)	Nessus	SuSE Local Security Checks	2016/5/19	2021/1/19	critical
92571	Debian DSA-3629-1 : ntp - security update	Nessus	Debian Local Security Checks	2016/7/27	2026/1/30	high
93896	Ubuntu 14.04 LTS / 16.04 LTS : NTP vulnerabilities (USN-3096-1)	Nessus	Ubuntu Local Security Checks	2016/10/6	2025/9/3	high

检测

插件搜索

critical

high

medium

high

medium

high

critical

critical

high

high