CVE-2015-1798

概要

参考情報

• bugs.ntp.org/show_bug.cgi
• lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
• lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html
• lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html
• lists.opensuse.org/opensuse-updates/2015-04/msg00052.html
• marc.info
• rhn.redhat.com/errata/RHSA-2015-1459.html
• support.apple.com/kb/HT204942
• support.ntp.org/bin/view/Main/SecurityNotice · Vendor Advisory
• tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd
• tools.cisco.com/security/center/viewAlert.x
• debian.org/security/2015/dsa-3223
• kb.cert.org/vuls/id/374268 · Third Party Advisory
• mandriva.com/security/advisories
• oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
• oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
• securityfocus.com/bid/73951
• securitytracker.com/id/1032032
• ubuntu.com/usn/USN-2567-1
• kc.mcafee.com/corporate/index
• security.gentoo.org/glsa/201509-01

ntp のその他の脆弱性

• CVE-2023-26555中 6.4praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manip…
• CVE-2023-26554中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a cl…
• CVE-2023-26553中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack …
• CVE-2023-26552中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a cli…
• CVE-2023-26551中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a clie…