CVE-2019-8936

Description

References

• bugs.ntp.org/show_bug.cgi · Exploit
• lists.opensuse.org/opensuse-security-announce/2019-04/msg00032.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2019-04/msg00036.html · Mailing List
• packetstormsecurity.com/files/152915/FreeBSD-Security-Advisory-FreeBSD-SA-19-04.ntp.html · Third Party Advisory
• support.ntp.org/bin/view/Main/SecurityNotice · Release Notes
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2NVS2CSG2TQ663CXOZZUJN4STQPMENNP
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JBGXY7OKWOLT6X6JAPVZRFEP4FLCGGST
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQDNHNYOJK2SRSGO23GQ2RXTOUY2HLNN
• seclists.org/bugtraq/2019/May/39

More vulnerabilities in hpux-ntp

• CVE-2016-9042MEDIUM 5.9An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unaut…
• CVE-2018-7185HIGH 7.5The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending …
• CVE-2018-7170MEDIUM 5.3ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitraril…
• CVE-2017-6458HIGH 8.8Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have …
• CVE-2016-7434HIGH 7.5The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.