CVE-2013-5211

概要

参考情報

• aix.software.ibm.com/aix/efixes/security/ntp_advisory.asc · Third Party Advisory
• bugs.ntp.org/show_bug.cgi · Issue Tracking
• ics-cert.us-cert.gov/advisories/ICSA-14-051-04 · Third Party Advisory
• lists.ntp.org/pipermail/pool/2011-December/005616.html · Broken Link
• lists.opensuse.org/opensuse-updates/2014-09/msg00031.html · Third Party Advisory
• marc.info · Mailing List
• marc.info · Mailing List
• openwall.com/lists/oss-security/2013/12/30/6 · Mailing List
• openwall.com/lists/oss-security/2013/12/30/7 · Mailing List
• secunia.com/advisories/59288 · Not Applicable
• secunia.com/advisories/59726 · Not Applicable
• www-947.ibm.com/support/entry/portal/docdisplay · Broken Link
• www-947.ibm.com/support/entry/portal/docdisplay · Broken Link
• eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-dev/ntp-dev-4.2.7p26.tar.gz · Patch
• kb.cert.org/vuls/id/348126 · Third Party Advisory
• oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html · Third Party Advisory
• securityfocus.com/bid/64692 · Broken Link
• securitytracker.com/id/1030433 · Third Party Advisory
• us-cert.gov/ncas/alerts/TA14-013A · Third Party Advisory
• h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay · Third Party Advisory
• puppet.com/security/cve/puppetlabs-ntp-nov-2015-advisory · Broken Link

ntp のその他の脆弱性

• CVE-2023-26555中 6.4praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manip…
• CVE-2023-26554中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a cl…
• CVE-2023-26553中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack …
• CVE-2023-26552中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a cli…
• CVE-2023-26551中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a clie…