Package ntp updated to version 4.2.8p12-alt0.M80P.1 for branch p8 in task 211996.

Published: 2022-09-20

BDU:2023-01499

Уязвимость реализации протокола синхронизации времени NTP межсетевого экрана Eltex «ESR-200», позволяющая нарушителю выполнить вредоносный код или повысить свои привилегии в системе

Severity: HIGH (7.0) Vector: AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Published: 2018-06-20
Modified: 2024-11-21

CVE-2018-12327

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.

Severity: CRITICAL (9.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Version: 2.1.0

Package ntp update in p8 on 2018-09-12

ALT-PU-2018-2312-1

Closed vulnerabilities

BDU:2023-01499

CVE-2018-12327