Red Hat Security AdvisoryRHSA-2015:1930
ntp security update
Released 2015-10-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ntp-4.2.6p5-19.el7_1.3, ntpdate-4.2.6p5-19.el7_1.3
- Red Hat Enterprise Linux Client Optional (v. 7) ntp-doc-4.2.6p5-19.el7_1.3, ntp-perl-4.2.6p5-19.el7_1.3, sntp-4.2.6p5-19.el7_1.3
- Red Hat Enterprise Linux ComputeNode (v. 7) ntp-4.2.6p5-19.el7_1.3, ntpdate-4.2.6p5-19.el7_1.3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ntp-doc-4.2.6p5-19.el7_1.3, ntp-perl-4.2.6p5-19.el7_1.3, sntp-4.2.6p5-19.el7_1.3
- Red Hat Enterprise Linux Desktop (v. 6) ntp-4.2.6p5-5.el6_7.2, ntpdate-4.2.6p5-5.el6_7.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) ntp-doc-4.2.6p5-5.el6_7.2, ntp-perl-4.2.6p5-5.el6_7.2
- Red Hat Enterprise Linux HPC Node (v. 6) ntp-4.2.6p5-5.el6_7.2, ntpdate-4.2.6p5-5.el6_7.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ntp-doc-4.2.6p5-5.el6_7.2, ntp-perl-4.2.6p5-5.el6_7.2
- Red Hat Enterprise Linux Server (v. 6) ntp-4.2.6p5-5.el6_7.2, ntpdate-4.2.6p5-5.el6_7.2
- Red Hat Enterprise Linux Server (v. 7) ntp-4.2.6p5-19.ael7b_1.3, ntp-4.2.6p5-19.el7_1.3, ntpdate-4.2.6p5-19.ael7b_1.3 +1
- Red Hat Enterprise Linux Server Optional (v. 6) ntp-doc-4.2.6p5-5.el6_7.2, ntp-perl-4.2.6p5-5.el6_7.2
- Red Hat Enterprise Linux Server Optional (v. 7) ntp-doc-4.2.6p5-19.ael7b_1.3, ntp-doc-4.2.6p5-19.el7_1.3, ntp-perl-4.2.6p5-19.ael7b_1.3 +3
- Red Hat Enterprise Linux Workstation (v. 6) ntp-4.2.6p5-5.el6_7.2, ntpdate-4.2.6p5-5.el6_7.2
- Red Hat Enterprise Linux Workstation (v. 7) ntp-4.2.6p5-19.el7_1.3, ntpdate-4.2.6p5-19.el7_1.3
- Red Hat Enterprise Linux Workstation Optional (v. 6) ntp-doc-4.2.6p5-5.el6_7.2, ntp-perl-4.2.6p5-5.el6_7.2
- Red Hat Enterprise Linux Workstation Optional (v. 7) ntp-doc-4.2.6p5-19.el7_1.3, ntp-perl-4.2.6p5-19.el7_1.3, sntp-4.2.6p5-19.el7_1.3
Fixes 2 records
Priority MEDIUM 46
The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.10661 · Published 2017-08-07 · Fixed CWE-20
Priority MEDIUM 45
The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time wh…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0913 · Published 2017-07-21 · Partial fix CWE-361
