CVE-2016-7431

概要

参考情報

• lists.opensuse.org/opensuse-updates/2016-12/msg00153.html
• nwtime.org/ntp428p9_release · Release Notes
• packetstormsecurity.com/files/140240/FreeBSD-Security-Advisory-FreeBSD-SA-16.39.ntp.html
• support.ntp.org/bin/view/Main/NtpBug3102 · Issue Tracking
• support.ntp.org/bin/view/Main/SecurityNotice · Vendor Advisory
• huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en
• oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
• securityfocus.com/archive/1/539955/100/0/threaded
• securityfocus.com/archive/1/540254/100/0/threaded
• securityfocus.com/archive/1/archive/1/539955/100/0/threaded
• securityfocus.com/archive/1/archive/1/540254/100/0/threaded
• securityfocus.com/bid/94454
• securitytracker.com/id/1037354
• ubuntu.com/usn/USN-3349-1
• bto.bluecoat.com/security-advisory/sa139
• cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf
• h20566.www2.hpe.com/hpsc/doc/public/display
• security.freebsd.org/advisories/FreeBSD-SA-16:39.ntp.asc
• support.hpe.com/hpsc/doc/public/display
• support.hpe.com/hpsc/doc/public/display
• support.hpe.com/hpsc/doc/public/display
• support.hpe.com/hpsc/doc/public/display
• us-cert.cisa.gov/ics/advisories/icsa-21-159-11
• broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-223
• kb.cert.org/vuls/id/633847 · Third Party Advisory

ntp のその他の脆弱性

• CVE-2023-26555中 6.4praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manip…
• CVE-2023-26554中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a cl…
• CVE-2023-26553中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack …
• CVE-2023-26552中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a cli…
• CVE-2023-26551中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a clie…