ID de Prueba:	1.3.6.1.4.1.25623.1.0.150700
Categoría:	Denial of Service
Título:	NTP < 4.2.8p13 NULL Pointer Dereference Vulnerability
Resumen:	A crafted malicious authenticated mode 6 (ntpq) packet from a; permitted network address can trigger a NULL pointer dereference, crashing ntpd. Note that for; this attack to work, the sending system must be on an address that the target's ntpd accepts mode; 6 packets from, and must use a private key that is specifically listed as being used for mode 6; authorization.
Descripción:	Summary: A crafted malicious authenticated mode 6 (ntpq) packet from a permitted network address can trigger a NULL pointer dereference, crashing ntpd. Note that for this attack to work, the sending system must be on an address that the target's ntpd accepts mode 6 packets from, and must use a private key that is specifically listed as being used for mode 6 authorization. Vulnerability Insight: Please see the references for more information on the vulnerabilities. Affected Software/OS: NTPd version prior to 4.2.8p13, 4.3.0 through 4.3.94. Solution: Update to version 4.2.8p13, 4.3.94 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2019-8936 Bugtraq: 20190515 FreeBSD Security Advisory FreeBSD-SA-19:04.ntp (Google Search) https://seclists.org/bugtraq/2019/May/39 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JBGXY7OKWOLT6X6JAPVZRFEP4FLCGGST/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQDNHNYOJK2SRSGO23GQ2RXTOUY2HLNN/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NVS2CSG2TQ663CXOZZUJN4STQPMENNP/ FreeBSD Security Advisory: FreeBSD-SA-19:04 https://security.FreeBSD.org/advisories/FreeBSD-SA-19:04.ntp.asc https://security.gentoo.org/glsa/201903-15 http://packetstormsecurity.com/files/152915/FreeBSD-Security-Advisory-FreeBSD-SA-19-04.ntp.html http://support.ntp.org/bin/view/Main/SecurityNotice SuSE Security Announcement: openSUSE-SU-2019:1143 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00032.html SuSE Security Announcement: openSUSE-SU-2019:1158 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00036.html https://usn.ubuntu.com/4563-1/
Copyright	Copyright (C) 2021 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.