Red Hat Security AdvisoryRHSA-2020:2663
ntp security update
Released 2020-06-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ntp-4.2.6p5-29.el7_8.2, ntpdate-4.2.6p5-29.el7_8.2
- Red Hat Enterprise Linux Client Optional (v. 7) ntp-doc-4.2.6p5-29.el7_8.2, ntp-perl-4.2.6p5-29.el7_8.2, sntp-4.2.6p5-29.el7_8.2
- Red Hat Enterprise Linux ComputeNode (v. 7) ntp-4.2.6p5-29.el7_8.2, ntpdate-4.2.6p5-29.el7_8.2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ntp-doc-4.2.6p5-29.el7_8.2, ntp-perl-4.2.6p5-29.el7_8.2, sntp-4.2.6p5-29.el7_8.2
- Red Hat Enterprise Linux Server (v. 7) ntp-4.2.6p5-29.el7_8.2, ntpdate-4.2.6p5-29.el7_8.2
- Red Hat Enterprise Linux Server Optional (v. 7) ntp-doc-4.2.6p5-29.el7_8.2, ntp-perl-4.2.6p5-29.el7_8.2, sntp-4.2.6p5-29.el7_8.2
- Red Hat Enterprise Linux Workstation (v. 7) ntp-4.2.6p5-29.el7_8.2, ntpdate-4.2.6p5-29.el7_8.2
- Red Hat Enterprise Linux Workstation Optional (v. 7) ntp-doc-4.2.6p5-29.el7_8.2, ntp-perl-4.2.6p5-29.el7_8.2, sntp-4.2.6p5-29.el7_8.2
Fixes 2 records
Priority LOW 38
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.03362 · Published 2020-06-04 · Partial fix CWE-330
Priority LOW 37
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled e…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02116 · Published 2020-04-17 · Partial fix CWE-346
