Red Hat Security AdvisoryRHSA-2009:1039
ntp security update
Released 2009-05-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) ntp-4.2.2p1-9.el5_3.2, ntp-4.2.2p1-9.el5_3.2.i386, ntp-4.2.2p1-9.el5_3.2.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) ntp-4.2.2p1-9.el5_3.2, ntp-4.2.2p1-9.el5_3.2.i386
Fixes 2 records
Priority MEDIUM 49
Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.21286 · Published 2009-05-19 · Fixed CWE-119
Priority MEDIUM 45
Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.13228 · Published 2009-04-14 · Fixed CWE-119
