NTP was updated to 4.2.8p12 (bsc#1111853) :

CVE-2018-12327: Fixed stack-based buffer overflow in the openhost() command-line call of NTPQ/NTPDC. (bsc#1098531)

CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection (bsc#1083424)

Please also see https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/ for more information.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New ntp packages are available for Slackware 14.0, 14.1, 14.2, and
-current to fix security issues.

This update for ntp fixes the following issues :

  - Update to 4.2.8p11 (bsc#1082210) :

  - CVE-2016-1549: Sybil vulnerability: ephemeral     association attack. While fixed in ntp-4.2.8p7, there     are significant additional protections for this issue in     4.2.8p11.

  - CVE-2018-7182: ctl_getitem(): buffer read overrun leads     to undefined behavior and information leak.
    (bsc#1083426)

  - CVE-2018-7170: Multiple authenticated ephemeral     associations. (bsc#1083424)

  - CVE-2018-7184: Interleaved symmetric mode cannot recover     from bad state. (bsc#1083422)

  - CVE-2018-7185: Unauthenticated packet can reset     authenticated interleaved association. (bsc#1083420)

  - CVE-2018-7183: ntpq:decodearr() can write beyond its     buffer limit.(bsc#1083417)

  - Don't use libevent's cached time stamps in sntp.
    (bsc#1077445) This update is a reissue of the previous     update with LTSS channels included.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ntp fixes the following issues: Security issues fixed :

  - CVE-2016-1549: Significant additional protections     against CVE-2016-1549 that was fixed in ntp-4.2.8p7     (bsc#1082210).

  - CVE-2018-7170: Ephemeral association time spoofing     additional protection (bsc#1083424).

  - CVE-2018-7182: Buffer read overrun leads information     leak in ctl_getitem() (bsc#1083426).

  - CVE-2018-7183: decodearr() can write beyond its buffer     limit (bsc#1083417).

  - CVE-2018-7184: Interleaved symmetric mode cannot recover     from bad state (bsc#1083422).

  - CVE-2018-7185: Unauthenticated packet can reset     authenticated interleaved association (bsc#1083420). Bug     fixes :

  - bsc#1077445: Don't use libevent's cached time stamps in     sntp.

  - Disable CMAC in ntp when building against a version of     OpenSSL that doesn't support it.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ntp fixes the following issues :

  - Update to 4.2.8p11 (bsc#1082210) :

  - CVE-2016-1549: Sybil vulnerability: ephemeral     association attack. While fixed in ntp-4.2.8p7, there     are significant additional protections for this issue in     4.2.8p11.

  - CVE-2018-7182: ctl_getitem(): buffer read overrun leads     to undefined behavior and information leak.
    (bsc#1083426)

  - CVE-2018-7170: Multiple authenticated ephemeral     associations. (bsc#1083424)

  - CVE-2018-7184: Interleaved symmetric mode cannot recover     from bad state. (bsc#1083422)

  - CVE-2018-7185: Unauthenticated packet can reset     authenticated interleaved association. (bsc#1083420)

  - CVE-2018-7183: ntpq:decodearr() can write beyond its     buffer limit.(bsc#1083417)

  - Don't use libevent's cached time stamps in sntp.
    (bsc#1077445)

  - Fix systemd migration in %pre (bsc#1034892).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of the remote NTP server is 4.x prior to 4.2.8p11. It is, therefore, affected by multiple vulnerabilities, which allow denial of service attacks, information disclosure and possibly, remote code execution.

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K82570157 advisory.

  - ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private     symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of     ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for     CVE-2016-1549. (CVE-2018-7170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for ntp fixes the following issues :

  - Update to 4.2.8p11 (bsc#1082210) :

  - CVE-2016-1549: Sybil vulnerability: ephemeral     association attack. While fixed in ntp-4.2.8p7, there     are significant additional protections for this issue in     4.2.8p11.

  - CVE-2018-7182: ctl_getitem(): buffer read overrun leads     to undefined behavior and information leak.
    (bsc#1083426)

  - CVE-2018-7170: Multiple authenticated ephemeral     associations. (bsc#1083424)

  - CVE-2018-7184: Interleaved symmetric mode cannot recover     from bad state. (bsc#1083422)

  - CVE-2018-7185: Unauthenticated packet can reset     authenticated interleaved association. (bsc#1083420)

  - CVE-2018-7183: ntpq:decodearr() can write beyond its     buffer limit.(bsc#1083417)

  - Don't use libevent's cached time stamps in sntp.
    (bsc#1077445)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for ntp fixes the following issues :

Update to 4.2.8p11 (bsc#1082210) :

  - CVE-2016-1549: Sybil vulnerability: ephemeral     association attack. While fixed in ntp-4.2.8p7, there     are significant additional protections for this issue in     4.2.8p11.

  - CVE-2018-7182: ctl_getitem(): buffer read overrun leads     to undefined behavior and information leak.
    (bsc#1083426)

  - CVE-2018-7170: Multiple authenticated ephemeral     associations. (bsc#1083424)

  - CVE-2018-7184: Interleaved symmetric mode cannot recover     from bad state. (bsc#1083422)

  - CVE-2018-7185: Unauthenticated packet can reset     authenticated interleaved association. (bsc#1083420)

  - CVE-2018-7183: ntpq:decodearr() can write beyond its     buffer limit.(bsc#1083417)

Don't use libevent's cached time stamps in sntp. (bsc#1077445)

This update is a reissue of the previous update with LTSS channels included.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
118355	SUSE SLES12 Security Update : ntp (SUSE-SU-2018:3351-1)	Nessus	SuSE Local Security Checks	2018/10/24	2024/7/29	critical
107103	Slackware 14.0 / 14.1 / 14.2 / current : ntp (SSA:2018-060-02)	Nessus	Slackware Local Security Checks	2018/3/2	2019/4/5	high
110639	SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2018:1765-1)	Nessus	SuSE Local Security Checks	2018/6/21	2024/9/17	critical
108651	SUSE SLES11 Security Update : ntp (SUSE-SU-2018:0808-1)	Nessus	SuSE Local Security Checks	2018/3/27	2024/12/4	critical
110224	SUSE SLES12 Security Update : ntp (SUSE-SU-2018:1464-1)	Nessus	SuSE Local Security Checks	2018/5/30	2024/9/30	critical
107258	Network Time Protocol Daemon (ntpd) 4.x < 4.2.8p11 Multiple Vulnerabilities	Nessus	Misc.	2018/3/9	2019/4/5	critical
120143	SUSE SLES15 Security Update : ntp (SUSE-SU-2018:3386-1)	Nessus	SuSE Local Security Checks	2019/1/2	2024/7/10	critical
184293	F5 Networks BIG-IP : NTP vulnerability (K82570157)	Nessus	F5 Networks Local Security Checks	2023/11/3	2024/5/7	medium
109085	SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2018:0956-1)	Nessus	SuSE Local Security Checks	2018/4/17	2024/10/31	critical
118269	SUSE SLES12 Security Update : ntp (SUSE-SU-2018:1765-2)	Nessus	SuSE Local Security Checks	2018/10/22	2024/7/30	critical
502464	Synology DiskStation Manager NTPD Victim's Clock Modification (CVE-2018-7170)	Tenable OT Security	Tenable.ot	2024/10/1	2024/10/2	medium

検出

プラグインの検索

critical

high

critical

critical

critical

critical

critical

medium

critical

critical

medium