ALT Linux Team

Package ntp update in sisyphus on 2018-08-28

ALT-PU-2018-2239-1

Package ntp updated to version 4.2.8p12-alt1 for branch sisyphus in task 211988.

Closed vulnerabilities

Published: 2022-09-20

BDU:2023-01499

Уязвимость реализации протокола синхронизации времени NTP межсетевого экрана Eltex «ESR-200», позволяющая нарушителю выполнить вредоносный код или повысить свои привилегии в системе

Severity: HIGH (7.0) Vector: AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
References:
Published: 2018-06-20
Modified: 2024-11-21

CVE-2018-12327

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.

Severity: CRITICAL (9.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top