Executive Summary
| Informations | |||
|---|---|---|---|
| Name | MDVSA-2015:046 | First vendor Publication | 2015-02-12 |
| Vendor | Mandriva | Last vendor Modification | 2015-02-12 |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : | |||
|---|---|---|---|
| Cvss Base Score | Not Defined | Attack Range | Not Defined |
| Cvss Impact Score | Not Defined | Attack Complexity | Not Defined |
| Cvss Expoit Score | Not Defined | Authentication | Not Defined |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Updated ntp packages fix security vulnerabilities: Stephen Roettger of the Google Security Team, Sebastian Krahmer of the SUSE Security Team and Harlan Stenn of Network Time Foundation discovered that the length value in extension fields is not properly validated in several code paths in ntp_crypto.c, which could lead to information leakage or denial of service (CVE-2014-9297). Stephen Roettger of the Google Security Team reported that ACLs based on IPv6 ::1 (localhost) addresses can be bypassed (CVE-2014-9298). |
Original Source
| Url : http://www.mandriva.com/security/advisories?name=MDVSA-2015:046 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:28761 | |||
| Oval ID: | oval:org.mitre.oval:def:28761 | ||
| Title: | Potential security vulnerabilities have been identified with HP-UX running NTP. These could be exploited remotely to execute code, create a Denial of Service (DoS), or other vulnerabilities. | ||
| Description: | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2014-9297 | Version: | 7 |
| Platform(s): | HP-UX 11 | Product(s): | |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:29503 | |||
| Oval ID: | oval:org.mitre.oval:def:29503 | ||
| Title: | AIX 'NTPv4' vulnerability | ||
| Description: | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2014-9297 | Version: | 5 |
| Platform(s): | IBM AIX 6.1 IBM AIX 7.1 | Product(s): | |
| Definition Synopsis: | |||
| |||
Information Assurance Vulnerability Management (IAVM)
| Date | Description |
|---|---|
| 2015-02-19 | IAVM : 2015-A-0041 - Multiple Vulnerabilities in Network Time Protocol (NTP) Severity : Category I - VMSKEY : V0058907 |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2015-12-22 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20151119_ntp_on_SL7_x.nasl - Type : ACT_GATHER_INFO |
| 2015-12-02 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2015-2231.nasl - Type : ACT_GATHER_INFO |
| 2015-11-24 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2015-2231.nasl - Type : ACT_GATHER_INFO |
| 2015-11-20 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2015-2231.nasl - Type : ACT_GATHER_INFO |
| 2015-10-05 | Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL16393.nasl - Type : ACT_GATHER_INFO |
| 2015-09-16 | Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL16392.nasl - Type : ACT_GATHER_INFO |
| 2015-08-04 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20150722_ntp_on_SL6_x.nasl - Type : ACT_GATHER_INFO |
| 2015-07-31 | Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2015-0102.nasl - Type : ACT_GATHER_INFO |
| 2015-07-30 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2015-1459.nasl - Type : ACT_GATHER_INFO |
| 2015-07-28 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2015-1459.nasl - Type : ACT_GATHER_INFO |
| 2015-07-23 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2015-1459.nasl - Type : ACT_GATHER_INFO |
| 2015-07-02 | Name : The remote AIX host is missing a security patch. File : aix_IV71096.nasl - Type : ACT_GATHER_INFO |
| 2015-07-02 | Name : The remote AIX host is missing a security patch. File : aix_IV71094.nasl - Type : ACT_GATHER_INFO |
| 2015-05-28 | Name : A network management system on the remote host is affected by multiple vulner... File : cisco-sa-20141222-ntpd-prime_dcnm.nasl - Type : ACT_GATHER_INFO |
| 2015-05-20 | Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2015-0322-1.nasl - Type : ACT_GATHER_INFO |
| 2015-04-10 | Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_10_10_3.nasl - Type : ACT_GATHER_INFO |
| 2015-04-10 | Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHNE_44236.nasl - Type : ACT_GATHER_INFO |
| 2015-04-10 | Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHNE_44235.nasl - Type : ACT_GATHER_INFO |
| 2015-03-30 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2015-140.nasl - Type : ACT_GATHER_INFO |
| 2015-03-26 | Name : The remote Debian host is missing a security update. File : debian_DLA-149.nasl - Type : ACT_GATHER_INFO |
| 2015-03-25 | Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2015-496.nasl - Type : ACT_GATHER_INFO |
| 2015-03-20 | Name : The remote NTP server is affected by multiple vulnerabilities. File : ntp_4_2_8.nasl - Type : ACT_GATHER_INFO |
| 2015-02-16 | Name : The remote Fedora host is missing a security update. File : fedora_2015-1759.nasl - Type : ACT_GATHER_INFO |
| 2015-02-16 | Name : The remote Fedora host is missing a security update. File : fedora_2015-1736.nasl - Type : ACT_GATHER_INFO |
| 2015-02-13 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2015-046.nasl - Type : ACT_GATHER_INFO |
| 2015-02-12 | Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_ntp-150209.nasl - Type : ACT_GATHER_INFO |
| 2015-02-10 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2497-1.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2015-10-06 09:28:20 |
|
| 2015-02-14 13:23:54 |
|
| 2015-02-12 13:21:59 |
|
