Red Hat Security AdvisoryRHSA-2019:2077
ntp security, bug fix, and enhancement update
Released 2019-08-06 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ntp-4.2.6p5-29.el7, ntpdate-4.2.6p5-29.el7
- Red Hat Enterprise Linux Client Optional (v. 7) ntp-doc-4.2.6p5-29.el7, ntp-perl-4.2.6p5-29.el7, sntp-4.2.6p5-29.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) ntp-4.2.6p5-29.el7, ntpdate-4.2.6p5-29.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ntp-doc-4.2.6p5-29.el7, ntp-perl-4.2.6p5-29.el7, sntp-4.2.6p5-29.el7
- Red Hat Enterprise Linux Server (v. 7) ntp-4.2.6p5-29.el7, ntpdate-4.2.6p5-29.el7
- Red Hat Enterprise Linux Server Optional (v. 7) ntp-doc-4.2.6p5-29.el7, ntp-perl-4.2.6p5-29.el7, sntp-4.2.6p5-29.el7
- Red Hat Enterprise Linux Workstation (v. 7) ntp-4.2.6p5-29.el7, ntpdate-4.2.6p5-29.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) ntp-doc-4.2.6p5-29.el7, ntp-perl-4.2.6p5-29.el7, sntp-4.2.6p5-29.el7
Fixes 1 record
Priority MEDIUM 64
Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line param…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.27514 · Published 2018-06-20 · Partial fix CWE-787
