Red Hat Security AdvisoryRHSA-2009:1651
ntp security update
Released 2009-12-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 ntp-4.1.2-6.el3, ntp-4.1.2-6.el3.i386
- Red Hat Enterprise Linux AS version 3 ntp-4.1.2-6.el3, ntp-4.1.2-6.el3.i386, ntp-4.1.2-6.el3.ia64 +1
- Red Hat Enterprise Linux ES version 3 ntp-4.1.2-6.el3, ntp-4.1.2-6.el3.i386, ntp-4.1.2-6.el3.ia64
- Red Hat Enterprise Linux WS version 3 ntp-4.1.2-6.el3, ntp-4.1.2-6.el3.i386, ntp-4.1.2-6.el3.ia64
Fixes 2 records
Priority MEDIUM 53
ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.32059 · Published 2009-12-09 · Fixed
Priority MEDIUM 45
Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.13228 · Published 2009-04-14 · Fixed CWE-119
