Red Hat Security AdvisoryRHSA-2017:0252
ntp security update
Released 2017-02-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ntp-4.2.6p5-25.el7_3.1, ntpdate-4.2.6p5-25.el7_3.1
- Red Hat Enterprise Linux Client Optional (v. 7) ntp-doc-4.2.6p5-25.el7_3.1, ntp-perl-4.2.6p5-25.el7_3.1, sntp-4.2.6p5-25.el7_3.1
- Red Hat Enterprise Linux ComputeNode (v. 7) ntp-4.2.6p5-25.el7_3.1, ntpdate-4.2.6p5-25.el7_3.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ntp-doc-4.2.6p5-25.el7_3.1, ntp-perl-4.2.6p5-25.el7_3.1, sntp-4.2.6p5-25.el7_3.1
- Red Hat Enterprise Linux Desktop (v. 6) ntp-4.2.6p5-10.el6_8.2, ntpdate-4.2.6p5-10.el6_8.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) ntp-doc-4.2.6p5-10.el6_8.2, ntp-perl-4.2.6p5-10.el6_8.2
- Red Hat Enterprise Linux HPC Node (v. 6) ntp-4.2.6p5-10.el6_8.2, ntpdate-4.2.6p5-10.el6_8.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ntp-doc-4.2.6p5-10.el6_8.2, ntp-perl-4.2.6p5-10.el6_8.2
- Red Hat Enterprise Linux Server (v. 6) ntp-4.2.6p5-10.el6_8.2, ntpdate-4.2.6p5-10.el6_8.2
- Red Hat Enterprise Linux Server (v. 7) ntp-4.2.6p5-25.el7_3.1, ntpdate-4.2.6p5-25.el7_3.1
- Red Hat Enterprise Linux Server Optional (v. 6) ntp-doc-4.2.6p5-10.el6_8.2, ntp-perl-4.2.6p5-10.el6_8.2
- Red Hat Enterprise Linux Server Optional (v. 7) ntp-doc-4.2.6p5-25.el7_3.1, ntp-perl-4.2.6p5-25.el7_3.1, sntp-4.2.6p5-25.el7_3.1
- Red Hat Enterprise Linux Workstation (v. 6) ntp-4.2.6p5-10.el6_8.2, ntpdate-4.2.6p5-10.el6_8.2
- Red Hat Enterprise Linux Workstation (v. 7) ntp-4.2.6p5-25.el7_3.1, ntpdate-4.2.6p5-25.el7_3.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) ntp-doc-4.2.6p5-10.el6_8.2, ntp-perl-4.2.6p5-10.el6_8.2
- Red Hat Enterprise Linux Workstation Optional (v. 7) ntp-doc-4.2.6p5-25.el7_3.1, ntp-perl-4.2.6p5-25.el7_3.1, sntp-4.2.6p5-25.el7_3.1
Fixes 5 records
Priority MEDIUM 47
NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sou…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.12367 · Published 2017-01-13 · Partial fix CWE-400
Priority MEDIUM 42
The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.
CVSS 3.0MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.11072 · Published 2017-01-13 · Partial fix CWE-400
Priority MEDIUM 40
ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted packet.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.11085 · Published 2017-01-13 · Partial fix CWE-476
Priority LOW 36
NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.09762 · Published 2017-01-13 · Fixed CWE-682
Priority LOW 28
NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a source) by sending a respons…
CVSS 3.0LOW 3.7· Network · No auth · No interaction · EPSS 0.07362 · Published 2017-01-13 · Partial fix CWE-18
THREATIST.IORead the docs