CVE-2016-2518

EPSS 15.08%
Veröffentlicht 30.01.2017 21:59:01
Zuletzt bearbeitet 13.05.2026 00:24:29
Erkennungen
Login

The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 36

NVD 124 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ntp ≫ Ntp Version < 4.2.8

Ntp ≫ Ntp Version >= 4.3.0 < 4.3.92

Ntp ≫ Ntp Version 4.2.8 Update -

Ntp ≫ Ntp Version 4.2.8 Update p1

Ntp ≫ Ntp Version 4.2.8 Update p1-beta1

Ntp ≫ Ntp Version 4.2.8 Update p1-beta2

Ntp ≫ Ntp Version 4.2.8 Update p1-beta3

Ntp ≫ Ntp Version 4.2.8 Update p1-beta4

Ntp ≫ Ntp Version 4.2.8 Update p1-beta5

Ntp ≫ Ntp Version 4.2.8 Update p1-rc1

Ntp ≫ Ntp Version 4.2.8 Update p1-rc2

Ntp ≫ Ntp Version 4.2.8 Update p2

Ntp ≫ Ntp Version 4.2.8 Update p2-rc1

Ntp ≫ Ntp Version 4.2.8 Update p2-rc2

Ntp ≫ Ntp Version 4.2.8 Update p2-rc3

Ntp ≫ Ntp Version 4.2.8 Update p3

Ntp ≫ Ntp Version 4.2.8 Update p3-rc1

Ntp ≫ Ntp Version 4.2.8 Update p3-rc2

Ntp ≫ Ntp Version 4.2.8 Update p3-rc3

Ntp ≫ Ntp Version 4.2.8 Update p4

Ntp ≫ Ntp Version 4.2.8 Update p5

Ntp ≫ Ntp Version 4.2.8 Update p6

Ntp ≫ Ntp Version 4.2.8 Update p7

Ntp ≫ Ntp Version 4.2.8 Update p8

Debian ≫ Debian Linux Version 8.0

Debian ≫ Debian Linux Version 9.0

Debian ≫ Debian Linux Version 10.0

Netapp ≫ Clustered Data Ontap Version -

Netapp ≫ Data Ontap Version - SwPlatform 7-mode

Netapp ≫ Oncommand Balance Version -

Netapp ≫ Oncommand Performance Manager Version -

Netapp ≫ Oncommand Unified Manager For Clustered Data Ontap Version -

Oracle ≫ Communications User Data Repository Version 10.0.0

Oracle ≫ Communications User Data Repository Version 10.0.1

Oracle ≫ Communications User Data Repository Version 12.0.0

Oracle ≫ Linux Version 6 Update -

Oracle ≫ Linux Version 7 Update -

Redhat ≫ Enterprise Linux Desktop Version 7.0

Redhat ≫ Enterprise Linux Server Version 6.0

Redhat ≫ Enterprise Linux Server Version 7.0

Redhat ≫ Enterprise Linux Server Aus Version 7.2

Redhat ≫ Enterprise Linux Server Aus Version 7.4

Redhat ≫ Enterprise Linux Server Aus Version 7.6

Redhat ≫ Enterprise Linux Server Eus Version 7.2

Redhat ≫ Enterprise Linux Server Eus Version 7.3

Redhat ≫ Enterprise Linux Server Eus Version 7.4

Redhat ≫ Enterprise Linux Server Eus Version 7.5

Redhat ≫ Enterprise Linux Server Eus Version 7.6

Redhat ≫ Enterprise Linux Server Eus Version 7.7

Redhat ≫ Enterprise Linux Server Tus Version 7.2

Redhat ≫ Enterprise Linux Server Tus Version 7.3

Redhat ≫ Enterprise Linux Server Tus Version 7.6

Redhat ≫ Enterprise Linux Server Tus Version 7.7

Redhat ≫ Enterprise Linux Workstation Version 6.0

Freebsd ≫ Freebsd Version 9.3 Update -

Freebsd ≫ Freebsd Version 9.3 Update p1

Freebsd ≫ Freebsd Version 9.3 Update p10

Freebsd ≫ Freebsd Version 9.3 Update p12

Freebsd ≫ Freebsd Version 9.3 Update p13

Freebsd ≫ Freebsd Version 9.3 Update p16

Freebsd ≫ Freebsd Version 9.3 Update p19

Freebsd ≫ Freebsd Version 9.3 Update p2

Freebsd ≫ Freebsd Version 9.3 Update p20

Freebsd ≫ Freebsd Version 9.3 Update p21

Freebsd ≫ Freebsd Version 9.3 Update p22

Freebsd ≫ Freebsd Version 9.3 Update p23

Freebsd ≫ Freebsd Version 9.3 Update p24

Freebsd ≫ Freebsd Version 9.3 Update p25

Freebsd ≫ Freebsd Version 9.3 Update p28

Freebsd ≫ Freebsd Version 9.3 Update p3

Freebsd ≫ Freebsd Version 9.3 Update p30

Freebsd ≫ Freebsd Version 9.3 Update p31

Freebsd ≫ Freebsd Version 9.3 Update p32

Freebsd ≫ Freebsd Version 9.3 Update p33

Freebsd ≫ Freebsd Version 9.3 Update p34

Freebsd ≫ Freebsd Version 9.3 Update p35

Freebsd ≫ Freebsd Version 9.3 Update p36

Freebsd ≫ Freebsd Version 9.3 Update p38

Freebsd ≫ Freebsd Version 9.3 Update p39

Freebsd ≫ Freebsd Version 9.3 Update p5

Freebsd ≫ Freebsd Version 9.3 Update p6

Freebsd ≫ Freebsd Version 9.3 Update p7

Freebsd ≫ Freebsd Version 9.3 Update p8

Freebsd ≫ Freebsd Version 9.3 Update p9

Freebsd ≫ Freebsd Version 10.1 Update -

Freebsd ≫ Freebsd Version 10.1 Update p1

Freebsd ≫ Freebsd Version 10.1 Update p10

Freebsd ≫ Freebsd Version 10.1 Update p12

Freebsd ≫ Freebsd Version 10.1 Update p15

Freebsd ≫ Freebsd Version 10.1 Update p16

Freebsd ≫ Freebsd Version 10.1 Update p17

Freebsd ≫ Freebsd Version 10.1 Update p18

Freebsd ≫ Freebsd Version 10.1 Update p19

Freebsd ≫ Freebsd Version 10.1 Update p2

Freebsd ≫ Freebsd Version 10.1 Update p22

Freebsd ≫ Freebsd Version 10.1 Update p24

Freebsd ≫ Freebsd Version 10.1 Update p25

Freebsd ≫ Freebsd Version 10.1 Update p26

Freebsd ≫ Freebsd Version 10.1 Update p27

Freebsd ≫ Freebsd Version 10.1 Update p28

Freebsd ≫ Freebsd Version 10.1 Update p29

Freebsd ≫ Freebsd Version 10.1 Update p3

Freebsd ≫ Freebsd Version 10.1 Update p30

Freebsd ≫ Freebsd Version 10.1 Update p31

Freebsd ≫ Freebsd Version 10.1 Update p4

Freebsd ≫ Freebsd Version 10.1 Update p5

Freebsd ≫ Freebsd Version 10.1 Update p6

Freebsd ≫ Freebsd Version 10.1 Update p7

Freebsd ≫ Freebsd Version 10.1 Update p8

Freebsd ≫ Freebsd Version 10.1 Update p9

Freebsd ≫ Freebsd Version 10.2 Update -

Freebsd ≫ Freebsd Version 10.2 Update p1

Freebsd ≫ Freebsd Version 10.2 Update p10

Freebsd ≫ Freebsd Version 10.2 Update p11

Freebsd ≫ Freebsd Version 10.2 Update p12

Freebsd ≫ Freebsd Version 10.2 Update p13

Freebsd ≫ Freebsd Version 10.2 Update p14

Freebsd ≫ Freebsd Version 10.2 Update p2

Freebsd ≫ Freebsd Version 10.2 Update p5

Freebsd ≫ Freebsd Version 10.2 Update p7

Freebsd ≫ Freebsd Version 10.2 Update p8

Freebsd ≫ Freebsd Version 10.2 Update p9

Freebsd ≫ Freebsd Version 10.3 Update -

Siemens ≫ Simatic Net Cp 443-1 Opc Ua Firmware

Siemens ≫ Simatic Net Cp 443-1 Opc Ua Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	15.08%	0.963

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Patch

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Third Party Advisory

http://www.debian.org/security/2016/dsa-3629

Third Party Advisory

https://security.gentoo.org/glsa/201607-15

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html

https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf

Third Party Advisory

https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11

http://www.ubuntu.com/usn/USN-3096-1

http://rhn.redhat.com/errata/RHSA-2016-1552.html

Broken Link

http://www.securitytracker.com/id/1035705

Third Party Advisory

VDB Entry

https://access.redhat.com/errata/RHSA-2016:1141

Third Party Advisory

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc

Third Party Advisory

https://security.netapp.com/advisory/ntap-20171004-0002/

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.html

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html

http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html

http://packetstormsecurity.com/files/136864/Slackware-Security-Advisory-ntp-Updates.html

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd

http://www.securityfocus.com/archive/1/538233/100/0/threaded

http://www.securityfocus.com/archive/1/archive/1/538233/100/0/threaded

https://www.debian.org/security/2016/dsa-3629

https://www.kb.cert.org/vuls/id/718152

Third Party Advisory

US Government Resource

http://support.ntp.org/bin/view/Main/NtpBug3009

Vendor Advisory

http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_ntp_4_2_8p7_Security

Vendor Advisory

http://www.securityfocus.com/bid/88226

Third Party Advisory

VDB Entry

https://support.f5.com/csp/article/K20804323

https://nvd.nist.gov/vuln/detail/CVE-2016-2518

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-2518

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-2518

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2016-2518