CVE-2018-12327

概要

参考情報

• securityfocus.com/bid/104517 · Third Party Advisory
• access.redhat.com/errata/RHSA-2018:3853
• access.redhat.com/errata/RHSA-2018:3854
• access.redhat.com/errata/RHSA-2019:2077
• gist.github.com/fakhrizulkifli/9b58ed8e0354e8deee50b0eebd1c011f · Exploit
• security.gentoo.org/glsa/201903-15
• support.hpe.com/hpsc/doc/public/display
• usn.ubuntu.com/4229-1
• exploit-db.com/exploits/44909 · Exploit

ntp のその他の脆弱性

• CVE-2023-26555中 6.4praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manip…
• CVE-2023-26554中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a cl…
• CVE-2023-26553中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack …
• CVE-2023-26552中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a cli…
• CVE-2023-26551中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a clie…