The remote NewStart CGSL host, running version MAIN 4.05, has ntp packages installed that are affected by multiple vulnerabilities:

  - A vulnerability was found in NTP, in the parsing of     packets from the /dev/datum device. A malicious device     could send crafted messages, causing ntpd to crash.
    (CVE-2017-6462)

  - A vulnerability was discovered in the NTP server's     parsing of configuration directives. A remote,     authenticated attacker could cause ntpd to crash by     sending a crafted message. (CVE-2017-6463,     CVE-2017-6464)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the ntp packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The Network Time Protocol (NTP) is used to synchronize     a computer's time with another reference time source.
    This package includes ntpd (a daemon which continuously     adjusts system time) and utilities used to query and     configure the ntpd daemon. Perl scripts ntp-wait and     ntptrace are in the ntp-perl package, ntpdate is in the     ntpdate package and sntp is in the sntp package. The     documentation is in the ntp-doc package. Security     Fix(es):NTP through 4.2.8p12 has a NULL Pointer     Dereference.(CVE-2019-8936)Buffer overflow in the     legacy Datum Programmable Time Server (DPTS) refclock     driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94     allows local users to have unspecified impact via a     crafted /dev/datum device.(CVE-2017-6462)NTP before     4.2.8p10 and 4.3.x before 4.3.94 allows remote     attackers to cause a denial of service (ntpd crash) via     a malformed mode configuration     directive.(CVE-2017-6464)NTP before 4.2.8p10 and 4.3.x     before 4.3.94 allows remote authenticated users to     cause a denial of service (daemon crash) via an invalid     setting in a :config directive, related to the unpeer     option.(CVE-2017-6463)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - ntpq in NTP before 4.2.8p7 allows remote attackers to     obtain origin timestamps and then impersonate peers via     unspecified vectors.(CVE-2015-8139)

  - NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7     is enabled, allows remote attackers to cause a denial     of service (ntpd abort) by using the same IP address     multiple times in an unconfig directive.(CVE-2016-2516)

  - The process_packet function in ntp_proto.c in ntpd in     NTP 4.x before 4.2.8p8 allows remote attackers to cause     a denial of service (peer-variable modification) by     sending spoofed packets from many source IP addresses     in a certain scenario, as demonstrated by triggering an     incorrect leap indication.(CVE-2016-4954)

  - ntpd in NTP 4.x before 4.2.8p8, when autokey is     enabled, allows remote attackers to cause a denial of     service (peer-variable clearing and association outage)     by sending (1) a spoofed crypto-NAK packet or (2) a     packet with an incorrect MAC value at a certain     time.(CVE-2016-4955)

  - ntpd in NTP 4.x before 4.2.8p8 allows remote attackers     to cause a denial of service (interleaved-mode     transition and time change) via a spoofed broadcast     packet. NOTE: this vulnerability exists because of an     incomplete fix for CVE-2016-1548.(CVE-2016-4956)

  - Buffer overflow in the legacy Datum Programmable Time     Server (DPTS) refclock driver in NTP before 4.2.8p10     and 4.3.x before 4.3.94 allows local users to have     unspecified impact via a crafted /dev/datum     device.(CVE-2017-6462)

  - NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows     remote authenticated users to cause a denial of service     (daemon crash) via an invalid setting in a :config     directive, related to the unpeer option.(CVE-2017-6463)

  - NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows     remote attackers to cause a denial of service (ntpd     crash) via a malformed mode configuration     directive.(CVE-2017-6464)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the ntp package has been released.

An update of [binutils,ntp,libarchive] packages for PhotonOS has been released.

The remote host is running a version of macOS that is prior to 10.13. It is, therefore, affected by multiple vulnerabilities in the following components :

 - Apache
 - AppSandbox
 - AppleScript
 - Application Firewall
 - ATS
 - Audio
 - CFNetwork
 - CFNetwork Proxies
 - CFString
 - Captive Network Assistant
 - CoreAudio
 - CoreText
 - DesktopServices
 - Directory Utility
 - file
 - Fonts
 - fsck_msdos
 - HFS
 - Heimdal
 - HelpViewer
 - IOFireWireFamily
 - ImageIO
 - Installer
 - Kernel
 - kext tools
 - libarchive
 - libc
 - libexpat
 - Mail
 - Mail Drafts
 - ntp
 - Open Scripting Architecture
 - PCRE
 - Postfix
 - Quick Look
 - QuickTime
 - Remote Management
 - SQLite
 - Sandbox
 - Screen Lock
 - Security
 - Spotlight
 - WebKit
 - zlib

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
127378	NewStart CGSL MAIN 4.05 : ntp Multiple Vulnerabilities (NS-SA-2019-0127)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	high
128941	EulerOS Virtualization for ARM 64 3.0.2.0 : ntp (EulerOS-SA-2019-1938)	Nessus	Huawei Local Security Checks	2019/9/17	2024/4/25	high
101311	EulerOS 2.0 SP2 : ntp (EulerOS-SA-2017-1125)	Nessus	Huawei Local Security Checks	2017/7/10	2021/1/6	medium
121678	Photon OS 1.0: Ntp PHSA-2017-0010	Nessus	PhotonOS Local Security Checks	2019/2/7	2024/7/22	high
111859	Photon OS 1.0: Binutils / Libarchive / Ntp PHSA-2017-0010 (deprecated)	Nessus	PhotonOS Local Security Checks	2018/8/17	2019/2/7	critical
700511	macOS < 10.13 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	2019/4/10	2019/4/10	critical

検出

プラグインの検索

high

high

medium

high

critical

critical