CVE-2020-15025

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-07/msg00005.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2020-07/msg00044.html · Mailing List
• bugs.gentoo.org/729458 · Issue Tracking
• security.gentoo.org/glsa/202007-12 · Third Party Advisory
• security.netapp.com/advisory/ntap-20200702-0002 · Third Party Advisory
• support.ntp.org/bin/view/Main/NtpBug3661 · Vendor Advisory
• support.ntp.org/bin/view/Main/SecurityNotice · Release Notes
• oracle.com/security-alerts/cpujan2021.html · Patch

ntp のその他の脆弱性

• CVE-2023-26555中 6.4praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manip…
• CVE-2023-26554中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a cl…
• CVE-2023-26553中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack …
• CVE-2023-26552中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a cli…
• CVE-2023-26551中 5.6mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a clie…