6.5

CVE-2017-6463

NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ntp ≫ Ntp Version4.2.8 Updatep9
Ntp ≫ Ntp Version4.3.0
Ntp ≫ Ntp Version4.3.1
Ntp ≫ Ntp Version4.3.2
Ntp ≫ Ntp Version4.3.3
Ntp ≫ Ntp Version4.3.4
Ntp ≫ Ntp Version4.3.5
Ntp ≫ Ntp Version4.3.6
Ntp ≫ Ntp Version4.3.7
Ntp ≫ Ntp Version4.3.8
Ntp ≫ Ntp Version4.3.9
Ntp ≫ Ntp Version4.3.10
Ntp ≫ Ntp Version4.3.11
Ntp ≫ Ntp Version4.3.12
Ntp ≫ Ntp Version4.3.13
Ntp ≫ Ntp Version4.3.14
Ntp ≫ Ntp Version4.3.15
Ntp ≫ Ntp Version4.3.16
Ntp ≫ Ntp Version4.3.17
Ntp ≫ Ntp Version4.3.18
Ntp ≫ Ntp Version4.3.19
Ntp ≫ Ntp Version4.3.20
Ntp ≫ Ntp Version4.3.21
Ntp ≫ Ntp Version4.3.22
Ntp ≫ Ntp Version4.3.23
Ntp ≫ Ntp Version4.3.24
Ntp ≫ Ntp Version4.3.25
Ntp ≫ Ntp Version4.3.26
Ntp ≫ Ntp Version4.3.27
Ntp ≫ Ntp Version4.3.28
Ntp ≫ Ntp Version4.3.29
Ntp ≫ Ntp Version4.3.30
Ntp ≫ Ntp Version4.3.31
Ntp ≫ Ntp Version4.3.32
Ntp ≫ Ntp Version4.3.33
Ntp ≫ Ntp Version4.3.34
Ntp ≫ Ntp Version4.3.35
Ntp ≫ Ntp Version4.3.36
Ntp ≫ Ntp Version4.3.37
Ntp ≫ Ntp Version4.3.38
Ntp ≫ Ntp Version4.3.39
Ntp ≫ Ntp Version4.3.40
Ntp ≫ Ntp Version4.3.41
Ntp ≫ Ntp Version4.3.42
Ntp ≫ Ntp Version4.3.43
Ntp ≫ Ntp Version4.3.44
Ntp ≫ Ntp Version4.3.45
Ntp ≫ Ntp Version4.3.46
Ntp ≫ Ntp Version4.3.47
Ntp ≫ Ntp Version4.3.48
Ntp ≫ Ntp Version4.3.49
Ntp ≫ Ntp Version4.3.50
Ntp ≫ Ntp Version4.3.51
Ntp ≫ Ntp Version4.3.52
Ntp ≫ Ntp Version4.3.53
Ntp ≫ Ntp Version4.3.54
Ntp ≫ Ntp Version4.3.55
Ntp ≫ Ntp Version4.3.56
Ntp ≫ Ntp Version4.3.57
Ntp ≫ Ntp Version4.3.58
Ntp ≫ Ntp Version4.3.59
Ntp ≫ Ntp Version4.3.60
Ntp ≫ Ntp Version4.3.61
Ntp ≫ Ntp Version4.3.62
Ntp ≫ Ntp Version4.3.63
Ntp ≫ Ntp Version4.3.64
Ntp ≫ Ntp Version4.3.65
Ntp ≫ Ntp Version4.3.66
Ntp ≫ Ntp Version4.3.67
Ntp ≫ Ntp Version4.3.68
Ntp ≫ Ntp Version4.3.69
Ntp ≫ Ntp Version4.3.70
Ntp ≫ Ntp Version4.3.71
Ntp ≫ Ntp Version4.3.72
Ntp ≫ Ntp Version4.3.73
Ntp ≫ Ntp Version4.3.74
Ntp ≫ Ntp Version4.3.75
Ntp ≫ Ntp Version4.3.76
Ntp ≫ Ntp Version4.3.77
Ntp ≫ Ntp Version4.3.78
Ntp ≫ Ntp Version4.3.79
Ntp ≫ Ntp Version4.3.80
Ntp ≫ Ntp Version4.3.81
Ntp ≫ Ntp Version4.3.82
Ntp ≫ Ntp Version4.3.83
Ntp ≫ Ntp Version4.3.84
Ntp ≫ Ntp Version4.3.85
Ntp ≫ Ntp Version4.3.86
Ntp ≫ Ntp Version4.3.87
Ntp ≫ Ntp Version4.3.88
Ntp ≫ Ntp Version4.3.89
Ntp ≫ Ntp Version4.3.90
Ntp ≫ Ntp Version4.3.91
Ntp ≫ Ntp Version4.3.92
Ntp ≫ Ntp Version4.3.93
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.24% 0.915
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
https://support.apple.com/HT208144
https://usn.ubuntu.com/3707-2/
http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu
Vendor Advisory
http://www.securitytracker.com/id/1038123
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:3071
https://access.redhat.com/errata/RHSA-2018:0855
https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc
http://support.ntp.org/bin/view/Main/NtpBug3387
Vendor Advisory
http://www.securityfocus.com/bid/97049
Third Party Advisory
VDB Entry