Description
The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote attackers to trigger an unintended association change via crafted packets.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141222-ntpd ↗
- http://marc.info/?l=bugtraq&m=142590659431171&w=2 ↗
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04790232 ↗
- https://kc.mcafee.com/corporate/index?page=content&id=SB10103 ↗
- http://www.securityfocus.com/bid/71758 ↗
- http://advisories.mageia.org/MGASA-2014-0541.html ↗
- http://www.kb.cert.org/vuls/id/852879 ↗
- http://marc.info/?l=bugtraq&m=142853370924302&w=2 ↗
- http://secunia.com/advisories/62209 ↗
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html ↗
- http://rhn.redhat.com/errata/RHSA-2015-0104.html ↗
- http://marc.info/?l=bugtraq&m=144182594518755&w=2 ↗
- http://bugs.ntp.org/show_bug.cgi?id=2670 ↗
- http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00020.html ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1176040 ↗
- http://support.ntp.org/bin/view/Main/SecurityNotice ↗
- http://bk1.ntp.org/ntp-dev/?PAGE=patch&REV=548ad06feXHK1HlZoY-WZVyynwvwAg ↗
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:003 ↗
- https://www.arista.com/en/support/advisories-notices/security-advisories/1047-security-advisory-8 ↗