Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2015-1798 (GCVE-0-2015-1798)
Vulnerability from cvelistv5
Published
2015-04-08 10:00
Modified
2024-08-06 04:54
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T04:54:16.002Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "1032032",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032032"
},
{
"name": "USN-2567-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2567-1"
},
{
"name": "VU#374268",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/374268"
},
{
"name": "SSRT102029",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2"
},
{
"name": "FEDORA-2015-5761",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10114"
},
{
"name": "FEDORA-2015-5874",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html"
},
{
"name": "APPLE-SA-2015-06-30-2",
"tags": [
"vendor-advisory",
"x_refsource_APPLE",
"x_transferred"
],
"url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
},
{
"name": "openSUSE-SU-2015:0775",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"name": "GLSA-201509-01",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201509-01"
},
{
"name": "20150408 Network Time Protocol Daemon MAC Checking Failure Authentication Bypass Vulnerability",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38276"
},
{
"name": "HPSBUX03333",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2"
},
{
"name": "MDVSA-2015:202",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA",
"x_transferred"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:202"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
},
{
"name": "73951",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/73951"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.apple.com/kb/HT204942"
},
{
"name": "RHSA-2015:1459",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1459.html"
},
{
"name": "20150408 Multiple Vulnerabilities in ntpd (April 2015) Affecting Cisco Products",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://bugs.ntp.org/show_bug.cgi?id=2779"
},
{
"name": "DSA-3223",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3223"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-04-07T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-01-04T19:57:01",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "1032032",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1032032"
},
{
"name": "USN-2567-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-2567-1"
},
{
"name": "VU#374268",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/374268"
},
{
"name": "SSRT102029",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2"
},
{
"name": "FEDORA-2015-5761",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10114"
},
{
"name": "FEDORA-2015-5874",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html"
},
{
"name": "APPLE-SA-2015-06-30-2",
"tags": [
"vendor-advisory",
"x_refsource_APPLE"
],
"url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
},
{
"name": "openSUSE-SU-2015:0775",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"name": "GLSA-201509-01",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201509-01"
},
{
"name": "20150408 Network Time Protocol Daemon MAC Checking Failure Authentication Bypass Vulnerability",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38276"
},
{
"name": "HPSBUX03333",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2"
},
{
"name": "MDVSA-2015:202",
"tags": [
"vendor-advisory",
"x_refsource_MANDRIVA"
],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:202"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
},
{
"name": "73951",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/73951"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.apple.com/kb/HT204942"
},
{
"name": "RHSA-2015:1459",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1459.html"
},
{
"name": "20150408 Multiple Vulnerabilities in ntpd (April 2015) Affecting Cisco Products",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://bugs.ntp.org/show_bug.cgi?id=2779"
},
{
"name": "DSA-3223",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2015/dsa-3223"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2015-1798",
"datePublished": "2015-04-08T10:00:00",
"dateReserved": "2015-02-17T00:00:00",
"dateUpdated": "2024-08-06T04:54:16.002Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2015-1798\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2015-04-08T10:59:04.610\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.\"},{\"lang\":\"es\",\"value\":\"La caracter\u00edstica symmetric-key en la funci\u00f3n receive en ntp_proto.c en ntpd en NTP 4.x anterior a 4.2.8p2 requiere un MAC correcto \u00fanicamente si el campo MAC tiene una longitud que no sea cero, lo que facilita a atacantes man-in-the-middle falsificar paquetes mediante la omisi\u00f3n del MAC.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:A/AC:H/Au:N/C:N/I:P/A:N\",\"baseScore\":1.8,\"accessVector\":\"ADJACENT_NETWORK\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":3.2,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-17\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"4.2.7p444\",\"matchCriteriaId\":\"E538FCAE-3E2C-4EA8-A74F-ABF47652C15C\"}]}]}],\"references\":[{\"url\":\"http://bugs.ntp.org/show_bug.cgi?id=2779\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1459.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://support.apple.com/kb/HT204942\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://tools.cisco.com/security/center/viewAlert.x?alertId=38276\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.debian.org/security/2015/dsa-3223\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.kb.cert.org/vuls/id/374268\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2015:202\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/73951\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securitytracker.com/id/1032032\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2567-1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10114\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://security.gentoo.org/glsa/201509-01\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://bugs.ntp.org/show_bug.cgi?id=2779\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1459.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://support.apple.com/kb/HT204942\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://tools.cisco.com/security/center/viewAlert.x?alertId=38276\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2015/dsa-3223\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.kb.cert.org/vuls/id/374268\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2015:202\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/73951\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1032032\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2567-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10114\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201509-01\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
rhsa-2015:1459
Vulnerability from csaf_redhat
Published
2015-07-21 10:15
Modified
2024-11-22 08:55
Summary
Red Hat Security Advisory: ntp security, bug fix, and enhancement update
Notes
Topic
Updated ntp packages that fix multiple security issues, several bugs, and
add two enhancements are now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having Moderate security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
The Network Time Protocol (NTP) is used to synchronize a computer's time
with another referenced time source.
It was found that because NTP's access control was based on a source IP
address, an attacker could bypass source IP restrictions and send malicious
control and configuration packets by spoofing ::1 addresses.
(CVE-2014-9298)
A denial of service flaw was found in the way NTP hosts that were peering
with each other authenticated themselves before updating their internal
state variables. An attacker could send packets to one peer host, which
could cascade to other peers, and stop the synchronization process among
the reached peers. (CVE-2015-1799)
A flaw was found in the way the ntp-keygen utility generated MD5 symmetric
keys on big-endian systems. An attacker could possibly use this flaw to
guess generated MD5 keys, which could then be used to spoof an NTP client
or server. (CVE-2015-3405)
A stack-based buffer overflow was found in the way the NTP autokey protocol
was implemented. When an NTP client decrypted a secret received from an NTP
server, it could cause that client to crash. (CVE-2014-9297)
It was found that ntpd did not check whether a Message Authentication Code
(MAC) was present in a received packet when ntpd was configured to use
symmetric cryptographic keys. A man-in-the-middle attacker could use this
flaw to send crafted packets that would be accepted by a client or a peer
without the attacker knowing the symmetric key. (CVE-2015-1798)
The CVE-2015-1798 and CVE-2015-1799 issues were discovered by Miroslav
Lichvár of Red Hat.
Bug fixes:
* The ntpd daemon truncated symmetric keys specified in the key file to 20
bytes. As a consequence, it was impossible to configure NTP authentication
to work with peers that use longer keys. The maximum length of keys has now
been changed to 32 bytes. (BZ#1053551)
* The ntp-keygen utility used the exponent of 3 when generating RSA keys,
and generating RSA keys failed when FIPS mode was enabled. ntp-keygen has
been modified to use the exponent of 65537, and generating keys in FIPS
mode now works as expected. (BZ#1184421)
* The ntpd daemon included a root delay when calculating its root
dispersion. Consequently, the NTP server reported larger root dispersion
than it should have and clients could reject the source when its distance
reached the maximum synchronization distance (1.5 seconds by default).
Calculation of root dispersion has been fixed, the root dispersion is now
reported correctly, and clients no longer reject the server due to a large
synchronization distance. (BZ#1045376)
* The ntpd daemon dropped incoming NTP packets if their source port was
lower than 123 (the NTP port). Clients behind Network Address Translation
(NAT) were unable to synchronize with the server if their source port was
translated to ports below 123. With this update, ntpd no longer checks the
source port number. (BZ#1171630)
Enhancements:
* This update introduces configurable access of memory segments used for
Shared Memory Driver (SHM) reference clocks. Previously, only the first two
memory segments were created with owner-only access, allowing just two SHM
reference clocks to be used securely on a system. Now, the owner-only
access to SHM is configurable with the "mode" option, and it is therefore
possible to use more SHM reference clocks securely. (BZ#1122015)
* Support for nanosecond resolution has been added to the SHM reference
clock. Prior to this update, when a Precision Time Protocol (PTP) hardware
clock was used as a time source to synchronize the system clock (for
example, with the timemaster service from the linuxptp package), the
accuracy of the synchronization was limited due to the microsecond
resolution of the SHM protocol. The nanosecond extension in the SHM
protocol now enables sub-microsecond synchronization of the system clock.
(BZ#1117704)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated ntp packages that fix multiple security issues, several bugs, and\nadd two enhancements are now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The Network Time Protocol (NTP) is used to synchronize a computer\u0027s time\nwith another referenced time source.\n\nIt was found that because NTP\u0027s access control was based on a source IP\naddress, an attacker could bypass source IP restrictions and send malicious\ncontrol and configuration packets by spoofing ::1 addresses.\n(CVE-2014-9298)\n\nA denial of service flaw was found in the way NTP hosts that were peering\nwith each other authenticated themselves before updating their internal\nstate variables. An attacker could send packets to one peer host, which\ncould cascade to other peers, and stop the synchronization process among\nthe reached peers. (CVE-2015-1799)\n\nA flaw was found in the way the ntp-keygen utility generated MD5 symmetric\nkeys on big-endian systems. An attacker could possibly use this flaw to\nguess generated MD5 keys, which could then be used to spoof an NTP client\nor server. (CVE-2015-3405)\n\nA stack-based buffer overflow was found in the way the NTP autokey protocol\nwas implemented. When an NTP client decrypted a secret received from an NTP\nserver, it could cause that client to crash. (CVE-2014-9297)\n\nIt was found that ntpd did not check whether a Message Authentication Code\n(MAC) was present in a received packet when ntpd was configured to use\nsymmetric cryptographic keys. A man-in-the-middle attacker could use this\nflaw to send crafted packets that would be accepted by a client or a peer\nwithout the attacker knowing the symmetric key. (CVE-2015-1798)\n\nThe CVE-2015-1798 and CVE-2015-1799 issues were discovered by Miroslav\nLichv\u00e1r of Red Hat.\n\nBug fixes:\n\n* The ntpd daemon truncated symmetric keys specified in the key file to 20\nbytes. As a consequence, it was impossible to configure NTP authentication\nto work with peers that use longer keys. The maximum length of keys has now\nbeen changed to 32 bytes. (BZ#1053551)\n\n* The ntp-keygen utility used the exponent of 3 when generating RSA keys,\nand generating RSA keys failed when FIPS mode was enabled. ntp-keygen has\nbeen modified to use the exponent of 65537, and generating keys in FIPS\nmode now works as expected. (BZ#1184421)\n\n* The ntpd daemon included a root delay when calculating its root\ndispersion. Consequently, the NTP server reported larger root dispersion\nthan it should have and clients could reject the source when its distance\nreached the maximum synchronization distance (1.5 seconds by default).\nCalculation of root dispersion has been fixed, the root dispersion is now\nreported correctly, and clients no longer reject the server due to a large\nsynchronization distance. (BZ#1045376)\n\n* The ntpd daemon dropped incoming NTP packets if their source port was\nlower than 123 (the NTP port). Clients behind Network Address Translation\n(NAT) were unable to synchronize with the server if their source port was\ntranslated to ports below 123. With this update, ntpd no longer checks the\nsource port number. (BZ#1171630)\n\nEnhancements:\n\n* This update introduces configurable access of memory segments used for\nShared Memory Driver (SHM) reference clocks. Previously, only the first two\nmemory segments were created with owner-only access, allowing just two SHM\nreference clocks to be used securely on a system. Now, the owner-only\naccess to SHM is configurable with the \"mode\" option, and it is therefore\npossible to use more SHM reference clocks securely. (BZ#1122015)\n\n* Support for nanosecond resolution has been added to the SHM reference\nclock. Prior to this update, when a Precision Time Protocol (PTP) hardware\nclock was used as a time source to synchronize the system clock (for\nexample, with the timemaster service from the linuxptp package), the\naccuracy of the synchronization was limited due to the microsecond\nresolution of the SHM protocol. The nanosecond extension in the SHM\nprotocol now enables sub-microsecond synchronization of the system clock.\n(BZ#1117704)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:1459",
"url": "https://access.redhat.com/errata/RHSA-2015:1459"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "995134",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=995134"
},
{
"category": "external",
"summary": "1045376",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045376"
},
{
"category": "external",
"summary": "1117704",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1117704"
},
{
"category": "external",
"summary": "1122015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1122015"
},
{
"category": "external",
"summary": "1165141",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1165141"
},
{
"category": "external",
"summary": "1166596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1166596"
},
{
"category": "external",
"summary": "1171630",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1171630"
},
{
"category": "external",
"summary": "1184572",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1184572"
},
{
"category": "external",
"summary": "1184573",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1184573"
},
{
"category": "external",
"summary": "1190619",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1190619"
},
{
"category": "external",
"summary": "1193849",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1193849"
},
{
"category": "external",
"summary": "1193850",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1193850"
},
{
"category": "external",
"summary": "1199430",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1199430"
},
{
"category": "external",
"summary": "1199435",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1199435"
},
{
"category": "external",
"summary": "1210324",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1210324"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1459.json"
}
],
"title": "Red Hat Security Advisory: ntp security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-11-22T08:55:56+00:00",
"generator": {
"date": "2024-11-22T08:55:56+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2015:1459",
"initial_release_date": "2015-07-21T10:15:04+00:00",
"revision_history": [
{
"date": "2015-07-21T10:15:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-07-21T10:15:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T08:55:56+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"product": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"product_id": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-debuginfo@4.2.6p5-5.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ntpdate-0:4.2.6p5-5.el6.x86_64",
"product": {
"name": "ntpdate-0:4.2.6p5-5.el6.x86_64",
"product_id": "ntpdate-0:4.2.6p5-5.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntpdate@4.2.6p5-5.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ntp-0:4.2.6p5-5.el6.x86_64",
"product": {
"name": "ntp-0:4.2.6p5-5.el6.x86_64",
"product_id": "ntp-0:4.2.6p5-5.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp@4.2.6p5-5.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ntp-perl-0:4.2.6p5-5.el6.x86_64",
"product": {
"name": "ntp-perl-0:4.2.6p5-5.el6.x86_64",
"product_id": "ntp-perl-0:4.2.6p5-5.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-perl@4.2.6p5-5.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"product": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"product_id": "ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-debuginfo@4.2.6p5-5.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "ntp-0:4.2.6p5-5.el6.i686",
"product": {
"name": "ntp-0:4.2.6p5-5.el6.i686",
"product_id": "ntp-0:4.2.6p5-5.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp@4.2.6p5-5.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "ntpdate-0:4.2.6p5-5.el6.i686",
"product": {
"name": "ntpdate-0:4.2.6p5-5.el6.i686",
"product_id": "ntpdate-0:4.2.6p5-5.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntpdate@4.2.6p5-5.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "ntp-perl-0:4.2.6p5-5.el6.i686",
"product": {
"name": "ntp-perl-0:4.2.6p5-5.el6.i686",
"product_id": "ntp-perl-0:4.2.6p5-5.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-perl@4.2.6p5-5.el6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-0:4.2.6p5-5.el6.src",
"product": {
"name": "ntp-0:4.2.6p5-5.el6.src",
"product_id": "ntp-0:4.2.6p5-5.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp@4.2.6p5-5.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-perl-0:4.2.6p5-5.el6.s390x",
"product": {
"name": "ntp-perl-0:4.2.6p5-5.el6.s390x",
"product_id": "ntp-perl-0:4.2.6p5-5.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-perl@4.2.6p5-5.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"product": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"product_id": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-debuginfo@4.2.6p5-5.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ntp-0:4.2.6p5-5.el6.s390x",
"product": {
"name": "ntp-0:4.2.6p5-5.el6.s390x",
"product_id": "ntp-0:4.2.6p5-5.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp@4.2.6p5-5.el6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ntpdate-0:4.2.6p5-5.el6.s390x",
"product": {
"name": "ntpdate-0:4.2.6p5-5.el6.s390x",
"product_id": "ntpdate-0:4.2.6p5-5.el6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntpdate@4.2.6p5-5.el6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-doc-0:4.2.6p5-5.el6.noarch",
"product": {
"name": "ntp-doc-0:4.2.6p5-5.el6.noarch",
"product_id": "ntp-doc-0:4.2.6p5-5.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-doc@4.2.6p5-5.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-perl-0:4.2.6p5-5.el6.ppc64",
"product": {
"name": "ntp-perl-0:4.2.6p5-5.el6.ppc64",
"product_id": "ntp-perl-0:4.2.6p5-5.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-perl@4.2.6p5-5.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"product": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"product_id": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-debuginfo@4.2.6p5-5.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "ntpdate-0:4.2.6p5-5.el6.ppc64",
"product": {
"name": "ntpdate-0:4.2.6p5-5.el6.ppc64",
"product_id": "ntpdate-0:4.2.6p5-5.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntpdate@4.2.6p5-5.el6?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "ntp-0:4.2.6p5-5.el6.ppc64",
"product": {
"name": "ntp-0:4.2.6p5-5.el6.ppc64",
"product_id": "ntp-0:4.2.6p5-5.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp@4.2.6p5-5.el6?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntp-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntp-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntp-0:4.2.6p5-5.el6.src"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.src",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-5.el6.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-5.el6.noarch",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
"product_id": "6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntp-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntp-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntp-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntp-0:4.2.6p5-5.el6.src"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.src",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntp-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-5.el6.noarch as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntp-doc-0:4.2.6p5-5.el6.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-5.el6.noarch",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntp-perl-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntp-perl-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntpdate-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntpdate-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntpdate-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client:ntpdate-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.src",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-5.el6.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-5.el6.noarch",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
"product_id": "6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntp-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntp-0:4.2.6p5-5.el6.src"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.src",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-5.el6.noarch as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-5.el6.noarch",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntp-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntp-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntp-0:4.2.6p5-5.el6.src"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.src",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-5.el6.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-5.el6.noarch",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntp-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntp-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntp-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntp-0:4.2.6p5-5.el6.src"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.src",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntp-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-5.el6.noarch as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntp-doc-0:4.2.6p5-5.el6.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-5.el6.noarch",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntp-perl-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntp-perl-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntpdate-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntpdate-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntpdate-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server:ntpdate-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntp-0:4.2.6p5-5.el6.src"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.src",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-5.el6.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-5.el6.noarch",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
"product_id": "6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntp-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntp-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntp-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntp-0:4.2.6p5-5.el6.src"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.src",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntp-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-5.el6.noarch as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-5.el6.noarch",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntp-perl-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntpdate-0:4.2.6p5-5.el6.i686"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.i686",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.ppc64",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.s390x",
"relates_to_product_reference": "6Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-5.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-5.el6.x86_64",
"relates_to_product_reference": "6Workstation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-9297",
"discovery_date": "2015-01-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1184573"
}
],
"notes": [
{
"category": "description",
"text": "A stack-based buffer overflow was found in the way the NTP autokey protocol was implemented. When an NTP client decrypted a secret received from an NTP server, it could cause that client to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ntp: vallen in extension fields are not validated",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of ntp as shipped with Red Hat Enterprise Linux 5.\n\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nA mitigation for Red Hat Enterprise Linux 6 and 7 is available at: https://bugzilla.redhat.com/show_bug.cgi?id=1184573#c16",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-9297"
},
{
"category": "external",
"summary": "RHBZ#1184573",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1184573"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-9297",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9297"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9297",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9297"
},
{
"category": "external",
"summary": "http://support.ntp.org/bin/view/Main/SecurityNotice#vallen_is_not_validated_in_sever",
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#vallen_is_not_validated_in_sever"
}
],
"release_date": "2015-02-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-07-21T10:15:04+00:00",
"details": "All ntp users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues and add these\nenhancements. After installing the update, the ntpd daemon will\nrestart automatically.\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1459"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "ntp: vallen in extension fields are not validated"
},
{
"cve": "CVE-2014-9298",
"discovery_date": "2015-01-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1184572"
}
],
"notes": [
{
"category": "description",
"text": "It was found that because NTP\u0027s access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by spoofing ::1 addresses.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ntp: drop packets with source address ::1",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of ntp as shipped with Red Hat Enterprise Linux 5.\n\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nTo mitigate this issue, you may use the ip6tables command to prevent spoofing of local addresses on any network interface other than the loopback interface. Refer to the Mitigation section on our KBase article: https://access.redhat.com/articles/1305723",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-9298"
},
{
"category": "external",
"summary": "RHBZ#1184572",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1184572"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-9298",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9298"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9298",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9298"
},
{
"category": "external",
"summary": "http://support.ntp.org/bin/view/Main/SecurityNotice#1_can_be_spoofed_on_some_OSes_so",
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#1_can_be_spoofed_on_some_OSes_so"
}
],
"release_date": "2015-02-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-07-21T10:15:04+00:00",
"details": "All ntp users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues and add these\nenhancements. After installing the update, the ntpd daemon will\nrestart automatically.\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1459"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ntp: drop packets with source address ::1"
},
{
"cve": "CVE-2014-9750",
"discovery_date": "2015-01-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1184573"
}
],
"notes": [
{
"category": "description",
"text": "A stack-based buffer overflow was found in the way the NTP autokey protocol was implemented. When an NTP client decrypted a secret received from an NTP server, it could cause that client to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ntp: vallen in extension fields are not validated",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of ntp as shipped with Red Hat Enterprise Linux 5.\n\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nA mitigation for Red Hat Enterprise Linux 6 and 7 is available at: https://bugzilla.redhat.com/show_bug.cgi?id=1184573#c16",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-9750"
},
{
"category": "external",
"summary": "RHBZ#1184573",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1184573"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-9750",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9750"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9750",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9750"
},
{
"category": "external",
"summary": "http://support.ntp.org/bin/view/Main/SecurityNotice#vallen_is_not_validated_in_sever",
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#vallen_is_not_validated_in_sever"
}
],
"release_date": "2015-02-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-07-21T10:15:04+00:00",
"details": "All ntp users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues and add these\nenhancements. After installing the update, the ntpd daemon will\nrestart automatically.\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1459"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "ntp: vallen in extension fields are not validated"
},
{
"cve": "CVE-2014-9751",
"discovery_date": "2015-01-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1184572"
}
],
"notes": [
{
"category": "description",
"text": "It was found that because NTP\u0027s access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by spoofing ::1 addresses.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ntp: drop packets with source address ::1",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of ntp as shipped with Red Hat Enterprise Linux 5.\n\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nTo mitigate this issue, you may use the ip6tables command to prevent spoofing of local addresses on any network interface other than the loopback interface. Refer to the Mitigation section on our KBase article: https://access.redhat.com/articles/1305723",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-9751"
},
{
"category": "external",
"summary": "RHBZ#1184572",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1184572"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-9751",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9751"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9751",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9751"
},
{
"category": "external",
"summary": "http://support.ntp.org/bin/view/Main/SecurityNotice#1_can_be_spoofed_on_some_OSes_so",
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#1_can_be_spoofed_on_some_OSes_so"
}
],
"release_date": "2015-02-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-07-21T10:15:04+00:00",
"details": "All ntp users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues and add these\nenhancements. After installing the update, the ntpd daemon will\nrestart automatically.\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1459"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ntp: drop packets with source address ::1"
},
{
"acknowledgments": [
{
"names": [
"Miroslav Lichv\u00e1r"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2015-1798",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2015-03-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1199430"
}
],
"notes": [
{
"category": "description",
"text": "It was found that ntpd did not check whether a Message Authentication Code (MAC) was present in a received packet when ntpd was configured to use symmetric cryptographic keys. A man-in-the-middle attacker could use this flaw to send crafted packets that would be accepted by a client or a peer without the attacker knowing the symmetric key.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ntp: ntpd accepts unauthenticated packets with symmetric key crypto",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the version of ntp as shipped with Red Hat Enterprise Linux 5",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-1798"
},
{
"category": "external",
"summary": "RHBZ#1199430",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1199430"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-1798",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-1798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-1798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1798"
}
],
"release_date": "2015-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-07-21T10:15:04+00:00",
"details": "All ntp users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues and add these\nenhancements. After installing the update, the ntpd daemon will\nrestart automatically.\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1459"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "ntp: ntpd accepts unauthenticated packets with symmetric key crypto"
},
{
"acknowledgments": [
{
"names": [
"Miroslav Lichv\u00e1r"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2015-1799",
"discovery_date": "2015-03-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1199435"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way NTP hosts that were peering with each other authenticated themselves before updating their internal state variables. An attacker could send packets to one peer host, which could cascade to other peers, and stop the synchronization process among the reached peers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ntp: authentication doesn\u0027t protect symmetric associations against DoS attacks",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-1799"
},
{
"category": "external",
"summary": "RHBZ#1199435",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1199435"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-1799",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-1799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-1799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1799"
}
],
"release_date": "2015-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-07-21T10:15:04+00:00",
"details": "All ntp users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues and add these\nenhancements. After installing the update, the ntpd daemon will\nrestart automatically.\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1459"
},
{
"category": "workaround",
"details": "To work around this issue, instead of configuring NTP hosts as peers with the \u0027peer\u0027 directive, use the \u0027server\u0027 directive on both hosts so that the connection uses a regular client/server mode of operation.\n\nMore information about how to configure NTP can be found at:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/ch-Configuring_NTP_Using_ntpd.html\n\nAutokey authentication between NTP peers is not sufficient to fully mitigate this issue.",
"product_ids": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ntp: authentication doesn\u0027t protect symmetric associations against DoS attacks"
},
{
"cve": "CVE-2015-3405",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2015-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1210324"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the ntp-keygen utility generated MD5 symmetric keys on big-endian systems. An attacker could possibly use this flaw to guess generated MD5 keys, which could then be used to spoof an NTP client or server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of ntp as shipped with Red Hat Enterprise Linux 5.\n\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3405"
},
{
"category": "external",
"summary": "RHBZ#1210324",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1210324"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3405",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3405"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3405",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3405"
}
],
"release_date": "2015-04-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-07-21T10:15:04+00:00",
"details": "All ntp users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues and add these\nenhancements. After installing the update, the ntpd daemon will\nrestart automatically.\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:1459"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"6Client-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-0:4.2.6p5-5.el6.src",
"6Client-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-0:4.2.6p5-5.el6.i686",
"6Client:ntp-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-0:4.2.6p5-5.el6.src",
"6Client:ntp-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Client:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Client:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Client:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Client:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Client:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Client:ntpdate-0:4.2.6p5-5.el6.i686",
"6Client:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Client:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Client:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.src",
"6ComputeNode:ntp-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.i686",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.s390x",
"6ComputeNode:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-0:4.2.6p5-5.el6.src",
"6Server-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-0:4.2.6p5-5.el6.i686",
"6Server:ntp-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-0:4.2.6p5-5.el6.src",
"6Server:ntp-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Server:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Server:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Server:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Server:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Server:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Server:ntpdate-0:4.2.6p5-5.el6.i686",
"6Server:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Server:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Server:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.src",
"6Workstation-optional:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation-optional:ntpdate-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-0:4.2.6p5-5.el6.src",
"6Workstation:ntp-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-debuginfo-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntp-doc-0:4.2.6p5-5.el6.noarch",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.i686",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntp-perl-0:4.2.6p5-5.el6.x86_64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.i686",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.ppc64",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.s390x",
"6Workstation:ntpdate-0:4.2.6p5-5.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems"
}
]
}
rhsa-2015:2231
Vulnerability from csaf_redhat
Published
2015-11-19 04:03
Modified
2024-11-22 08:56
Summary
Red Hat Security Advisory: ntp security, bug fix, and enhancement update
Notes
Topic
Updated ntp packages that fix multiple security issues, several bugs, and
add various enhancements are now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having Moderate security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
The Network Time Protocol (NTP) is used to synchronize a computer's time
with another referenced time source. These packages include the ntpd
service which continuously adjusts system time and utilities used to query
and configure the ntpd service.
It was found that because NTP's access control was based on a source IP
address, an attacker could bypass source IP restrictions and send
malicious control and configuration packets by spoofing ::1 addresses.
(CVE-2014-9298, CVE-2014-9751)
A denial of service flaw was found in the way NTP hosts that were peering
with each other authenticated themselves before updating their internal
state variables. An attacker could send packets to one peer host, which
could cascade to other peers, and stop the synchronization process among
the reached peers. (CVE-2015-1799)
A flaw was found in the way the ntp-keygen utility generated MD5 symmetric
keys on big-endian systems. An attacker could possibly use this flaw to
guess generated MD5 keys, which could then be used to spoof an NTP client
or server. (CVE-2015-3405)
A stack-based buffer overflow was found in the way the NTP autokey protocol
was implemented. When an NTP client decrypted a secret received from an NTP
server, it could cause that client to crash. (CVE-2014-9297, CVE-2014-9750)
It was found that ntpd did not check whether a Message Authentication Code
(MAC) was present in a received packet when ntpd was configured to use
symmetric cryptographic keys. A man-in-the-middle attacker could use this
flaw to send crafted packets that would be accepted by a client or a peer
without the attacker knowing the symmetric key. (CVE-2015-1798)
The CVE-2015-1798 and CVE-2015-1799 issues were discovered by Miroslav
Lichvár of Red Hat.
Bug fixes:
* The ntpd service truncated symmetric keys specified in the key file to 20
bytes. As a consequence, it was impossible to configure NTP authentication
to work with peers that use longer keys. With this update, the maximum key
length has been changed to 32 bytes. (BZ#1191111)
* The ntpd service could previously join multicast groups only when
starting, which caused problems if ntpd was started during system boot
before network was configured. With this update, ntpd attempts to join
multicast groups every time network configuration is changed. (BZ#1207014)
* Previously, the ntp-keygen utility used the exponent of 3 when generating
RSA keys. Consequently, generating RSA keys failed when FIPS mode was
enabled. With this update, ntp-keygen has been modified to use the exponent
of 65537, and generating keys in FIPS mode now works as expected.
(BZ#1191116)
* The ntpd service dropped incoming NTP packets if their source port was
lower than 123 (the NTP port). With this update, ntpd no longer checks the
source port number, and clients behind NAT are now able to correctly
synchronize with the server. (BZ#1171640)
Enhancements:
* This update adds support for configurable Differentiated Services Code
Points (DSCP) in NTP packets, simplifying configuration in large networks
where different NTP implementations or versions are using different DSCP
values. (BZ#1202828)
* This update adds the ability to configure separate clock stepping
thresholds for each direction (backward and forward). Use the "stepback"
and "stepfwd" options to configure each threshold. (BZ#1193154)
* Support for nanosecond resolution has been added to the Structural
Health Monitoring (SHM) reference clock. Prior to this update, when a
Precision Time Protocol (PTP) hardware clock was used as a time source to
synchronize the system clock, the accuracy of the synchronization was
limited due to the microsecond resolution of the SHM protocol. The
nanosecond extension in the SHM protocol now allows sub-microsecond
synchronization of the system clock. (BZ#1117702)
All ntp users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues and add these
enhancements.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated ntp packages that fix multiple security issues, several bugs, and\nadd various enhancements are now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The Network Time Protocol (NTP) is used to synchronize a computer\u0027s time\nwith another referenced time source. These packages include the ntpd\nservice which continuously adjusts system time and utilities used to query\nand configure the ntpd service.\n\nIt was found that because NTP\u0027s access control was based on a source IP\naddress, an attacker could bypass source IP restrictions and send\nmalicious control and configuration packets by spoofing ::1 addresses.\n(CVE-2014-9298, CVE-2014-9751)\n\nA denial of service flaw was found in the way NTP hosts that were peering\nwith each other authenticated themselves before updating their internal\nstate variables. An attacker could send packets to one peer host, which\ncould cascade to other peers, and stop the synchronization process among\nthe reached peers. (CVE-2015-1799)\n\nA flaw was found in the way the ntp-keygen utility generated MD5 symmetric\nkeys on big-endian systems. An attacker could possibly use this flaw to\nguess generated MD5 keys, which could then be used to spoof an NTP client\nor server. (CVE-2015-3405)\n\nA stack-based buffer overflow was found in the way the NTP autokey protocol\nwas implemented. When an NTP client decrypted a secret received from an NTP\nserver, it could cause that client to crash. (CVE-2014-9297, CVE-2014-9750)\n\nIt was found that ntpd did not check whether a Message Authentication Code\n(MAC) was present in a received packet when ntpd was configured to use\nsymmetric cryptographic keys. A man-in-the-middle attacker could use this\nflaw to send crafted packets that would be accepted by a client or a peer\nwithout the attacker knowing the symmetric key. (CVE-2015-1798)\n\nThe CVE-2015-1798 and CVE-2015-1799 issues were discovered by Miroslav\nLichv\u00e1r of Red Hat.\n\nBug fixes:\n\n* The ntpd service truncated symmetric keys specified in the key file to 20\nbytes. As a consequence, it was impossible to configure NTP authentication\nto work with peers that use longer keys. With this update, the maximum key\nlength has been changed to 32 bytes. (BZ#1191111)\n\n* The ntpd service could previously join multicast groups only when\nstarting, which caused problems if ntpd was started during system boot\nbefore network was configured. With this update, ntpd attempts to join\nmulticast groups every time network configuration is changed. (BZ#1207014)\n\n* Previously, the ntp-keygen utility used the exponent of 3 when generating\nRSA keys. Consequently, generating RSA keys failed when FIPS mode was\nenabled. With this update, ntp-keygen has been modified to use the exponent\nof 65537, and generating keys in FIPS mode now works as expected.\n(BZ#1191116)\n\n* The ntpd service dropped incoming NTP packets if their source port was\nlower than 123 (the NTP port). With this update, ntpd no longer checks the\nsource port number, and clients behind NAT are now able to correctly\nsynchronize with the server. (BZ#1171640)\n\nEnhancements:\n\n* This update adds support for configurable Differentiated Services Code\nPoints (DSCP) in NTP packets, simplifying configuration in large networks\nwhere different NTP implementations or versions are using different DSCP\nvalues. (BZ#1202828)\n\n* This update adds the ability to configure separate clock stepping\nthresholds for each direction (backward and forward). Use the \"stepback\"\nand \"stepfwd\" options to configure each threshold. (BZ#1193154)\n\n* Support for nanosecond resolution has been added to the Structural\nHealth Monitoring (SHM) reference clock. Prior to this update, when a\nPrecision Time Protocol (PTP) hardware clock was used as a time source to\nsynchronize the system clock, the accuracy of the synchronization was\nlimited due to the microsecond resolution of the SHM protocol. The\nnanosecond extension in the SHM protocol now allows sub-microsecond\nsynchronization of the system clock. (BZ#1117702)\n\nAll ntp users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues and add these\nenhancements.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2015:2231",
"url": "https://access.redhat.com/errata/RHSA-2015:2231"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1117702",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1117702"
},
{
"category": "external",
"summary": "1122012",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1122012"
},
{
"category": "external",
"summary": "1171640",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1171640"
},
{
"category": "external",
"summary": "1180721",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180721"
},
{
"category": "external",
"summary": "1184572",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1184572"
},
{
"category": "external",
"summary": "1184573",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1184573"
},
{
"category": "external",
"summary": "1191108",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191108"
},
{
"category": "external",
"summary": "1191122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191122"
},
{
"category": "external",
"summary": "1193154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1193154"
},
{
"category": "external",
"summary": "1199430",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1199430"
},
{
"category": "external",
"summary": "1199435",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1199435"
},
{
"category": "external",
"summary": "1210324",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1210324"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2231.json"
}
],
"title": "Red Hat Security Advisory: ntp security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2024-11-22T08:56:03+00:00",
"generator": {
"date": "2024-11-22T08:56:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2015:2231",
"initial_release_date": "2015-11-19T04:03:04+00:00",
"revision_history": [
{
"date": "2015-11-19T04:03:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2015-11-19T04:03:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T08:56:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-perl-0:4.2.6p5-22.el7.noarch",
"product": {
"name": "ntp-perl-0:4.2.6p5-22.el7.noarch",
"product_id": "ntp-perl-0:4.2.6p5-22.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-perl@4.2.6p5-22.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ntp-doc-0:4.2.6p5-22.el7.noarch",
"product": {
"name": "ntp-doc-0:4.2.6p5-22.el7.noarch",
"product_id": "ntp-doc-0:4.2.6p5-22.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-doc@4.2.6p5-22.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"product": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"product_id": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-debuginfo@4.2.6p5-22.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sntp-0:4.2.6p5-22.el7.x86_64",
"product": {
"name": "sntp-0:4.2.6p5-22.el7.x86_64",
"product_id": "sntp-0:4.2.6p5-22.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sntp@4.2.6p5-22.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ntpdate-0:4.2.6p5-22.el7.x86_64",
"product": {
"name": "ntpdate-0:4.2.6p5-22.el7.x86_64",
"product_id": "ntpdate-0:4.2.6p5-22.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntpdate@4.2.6p5-22.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ntp-0:4.2.6p5-22.el7.x86_64",
"product": {
"name": "ntp-0:4.2.6p5-22.el7.x86_64",
"product_id": "ntp-0:4.2.6p5-22.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp@4.2.6p5-22.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-0:4.2.6p5-22.el7.src",
"product": {
"name": "ntp-0:4.2.6p5-22.el7.src",
"product_id": "ntp-0:4.2.6p5-22.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp@4.2.6p5-22.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"product": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"product_id": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-debuginfo@4.2.6p5-22.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64",
"product": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64",
"product_id": "ntpdate-0:4.2.6p5-22.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntpdate@4.2.6p5-22.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "ntp-0:4.2.6p5-22.el7.ppc64",
"product": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64",
"product_id": "ntp-0:4.2.6p5-22.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp@4.2.6p5-22.el7?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "sntp-0:4.2.6p5-22.el7.ppc64",
"product": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64",
"product_id": "sntp-0:4.2.6p5-22.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sntp@4.2.6p5-22.el7?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-0:4.2.6p5-22.el7.aarch64",
"product": {
"name": "ntp-0:4.2.6p5-22.el7.aarch64",
"product_id": "ntp-0:4.2.6p5-22.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp@4.2.6p5-22.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"product": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"product_id": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-debuginfo@4.2.6p5-22.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ntpdate-0:4.2.6p5-22.el7.aarch64",
"product": {
"name": "ntpdate-0:4.2.6p5-22.el7.aarch64",
"product_id": "ntpdate-0:4.2.6p5-22.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntpdate@4.2.6p5-22.el7?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sntp-0:4.2.6p5-22.el7.aarch64",
"product": {
"name": "sntp-0:4.2.6p5-22.el7.aarch64",
"product_id": "sntp-0:4.2.6p5-22.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sntp@4.2.6p5-22.el7?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-0:4.2.6p5-22.el7.s390x",
"product": {
"name": "ntp-0:4.2.6p5-22.el7.s390x",
"product_id": "ntp-0:4.2.6p5-22.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp@4.2.6p5-22.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"product": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"product_id": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-debuginfo@4.2.6p5-22.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ntpdate-0:4.2.6p5-22.el7.s390x",
"product": {
"name": "ntpdate-0:4.2.6p5-22.el7.s390x",
"product_id": "ntpdate-0:4.2.6p5-22.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntpdate@4.2.6p5-22.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sntp-0:4.2.6p5-22.el7.s390x",
"product": {
"name": "sntp-0:4.2.6p5-22.el7.s390x",
"product_id": "sntp-0:4.2.6p5-22.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sntp@4.2.6p5-22.el7?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64le",
"product": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64le",
"product_id": "ntpdate-0:4.2.6p5-22.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntpdate@4.2.6p5-22.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ntp-0:4.2.6p5-22.el7.ppc64le",
"product": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64le",
"product_id": "ntp-0:4.2.6p5-22.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp@4.2.6p5-22.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"product": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"product_id": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ntp-debuginfo@4.2.6p5-22.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sntp-0:4.2.6p5-22.el7.ppc64le",
"product": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64le",
"product_id": "sntp-0:4.2.6p5-22.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sntp@4.2.6p5-22.el7?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntp-0:4.2.6p5-22.el7.src"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.src",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-perl-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:sntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Client-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntp-0:4.2.6p5-22.el7.src"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.src",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntp-doc-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntp-perl-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-perl-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntpdate-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntpdate-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntpdate-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:ntpdate-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:sntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:sntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:sntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:sntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client:sntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.src",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-perl-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntp-0:4.2.6p5-22.el7.src"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.src",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-perl-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntp-0:4.2.6p5-22.el7.src"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.src",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-perl-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:sntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Server-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntp-0:4.2.6p5-22.el7.src"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.src",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntp-doc-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntp-perl-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-perl-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntpdate-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntpdate-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntpdate-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:ntpdate-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:sntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:sntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:sntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:sntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server:sntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntp-0:4.2.6p5-22.el7.src"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.src",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-perl-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntp-0:4.2.6p5-22.el7.src"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.src",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-doc-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-perl-0:4.2.6p5-22.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch"
},
"product_reference": "ntp-perl-0:4.2.6p5-22.el7.noarch",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntpdate-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "ntpdate-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:sntp-0:4.2.6p5-22.el7.aarch64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.aarch64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:sntp-0:4.2.6p5-22.el7.ppc64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.ppc64le",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:sntp-0:4.2.6p5-22.el7.s390x"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.s390x",
"relates_to_product_reference": "7Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sntp-0:4.2.6p5-22.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
},
"product_reference": "sntp-0:4.2.6p5-22.el7.x86_64",
"relates_to_product_reference": "7Workstation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-9297",
"discovery_date": "2015-01-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1184573"
}
],
"notes": [
{
"category": "description",
"text": "A stack-based buffer overflow was found in the way the NTP autokey protocol was implemented. When an NTP client decrypted a secret received from an NTP server, it could cause that client to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ntp: vallen in extension fields are not validated",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of ntp as shipped with Red Hat Enterprise Linux 5.\n\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nA mitigation for Red Hat Enterprise Linux 6 and 7 is available at: https://bugzilla.redhat.com/show_bug.cgi?id=1184573#c16",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-9297"
},
{
"category": "external",
"summary": "RHBZ#1184573",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1184573"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-9297",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9297"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9297",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9297"
},
{
"category": "external",
"summary": "http://support.ntp.org/bin/view/Main/SecurityNotice#vallen_is_not_validated_in_sever",
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#vallen_is_not_validated_in_sever"
}
],
"release_date": "2015-02-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-19T04:03:04+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2231"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "ntp: vallen in extension fields are not validated"
},
{
"cve": "CVE-2014-9298",
"discovery_date": "2015-01-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1184572"
}
],
"notes": [
{
"category": "description",
"text": "It was found that because NTP\u0027s access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by spoofing ::1 addresses.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ntp: drop packets with source address ::1",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of ntp as shipped with Red Hat Enterprise Linux 5.\n\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nTo mitigate this issue, you may use the ip6tables command to prevent spoofing of local addresses on any network interface other than the loopback interface. Refer to the Mitigation section on our KBase article: https://access.redhat.com/articles/1305723",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-9298"
},
{
"category": "external",
"summary": "RHBZ#1184572",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1184572"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-9298",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9298"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9298",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9298"
},
{
"category": "external",
"summary": "http://support.ntp.org/bin/view/Main/SecurityNotice#1_can_be_spoofed_on_some_OSes_so",
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#1_can_be_spoofed_on_some_OSes_so"
}
],
"release_date": "2015-02-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-19T04:03:04+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2231"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ntp: drop packets with source address ::1"
},
{
"cve": "CVE-2014-9750",
"discovery_date": "2015-01-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1184573"
}
],
"notes": [
{
"category": "description",
"text": "A stack-based buffer overflow was found in the way the NTP autokey protocol was implemented. When an NTP client decrypted a secret received from an NTP server, it could cause that client to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ntp: vallen in extension fields are not validated",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of ntp as shipped with Red Hat Enterprise Linux 5.\n\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nA mitigation for Red Hat Enterprise Linux 6 and 7 is available at: https://bugzilla.redhat.com/show_bug.cgi?id=1184573#c16",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-9750"
},
{
"category": "external",
"summary": "RHBZ#1184573",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1184573"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-9750",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9750"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9750",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9750"
},
{
"category": "external",
"summary": "http://support.ntp.org/bin/view/Main/SecurityNotice#vallen_is_not_validated_in_sever",
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#vallen_is_not_validated_in_sever"
}
],
"release_date": "2015-02-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-19T04:03:04+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2231"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "ntp: vallen in extension fields are not validated"
},
{
"cve": "CVE-2014-9751",
"discovery_date": "2015-01-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1184572"
}
],
"notes": [
{
"category": "description",
"text": "It was found that because NTP\u0027s access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by spoofing ::1 addresses.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ntp: drop packets with source address ::1",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of ntp as shipped with Red Hat Enterprise Linux 5.\n\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nTo mitigate this issue, you may use the ip6tables command to prevent spoofing of local addresses on any network interface other than the loopback interface. Refer to the Mitigation section on our KBase article: https://access.redhat.com/articles/1305723",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-9751"
},
{
"category": "external",
"summary": "RHBZ#1184572",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1184572"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-9751",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9751"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-9751",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-9751"
},
{
"category": "external",
"summary": "http://support.ntp.org/bin/view/Main/SecurityNotice#1_can_be_spoofed_on_some_OSes_so",
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#1_can_be_spoofed_on_some_OSes_so"
}
],
"release_date": "2015-02-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-19T04:03:04+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2231"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"products": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ntp: drop packets with source address ::1"
},
{
"acknowledgments": [
{
"names": [
"Miroslav Lichv\u00e1r"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2015-1798",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2015-03-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1199430"
}
],
"notes": [
{
"category": "description",
"text": "It was found that ntpd did not check whether a Message Authentication Code (MAC) was present in a received packet when ntpd was configured to use symmetric cryptographic keys. A man-in-the-middle attacker could use this flaw to send crafted packets that would be accepted by a client or a peer without the attacker knowing the symmetric key.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ntp: ntpd accepts unauthenticated packets with symmetric key crypto",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the version of ntp as shipped with Red Hat Enterprise Linux 5",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-1798"
},
{
"category": "external",
"summary": "RHBZ#1199430",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1199430"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-1798",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-1798"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-1798",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1798"
}
],
"release_date": "2015-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-19T04:03:04+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2231"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "ntp: ntpd accepts unauthenticated packets with symmetric key crypto"
},
{
"acknowledgments": [
{
"names": [
"Miroslav Lichv\u00e1r"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2015-1799",
"discovery_date": "2015-03-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1199435"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way NTP hosts that were peering with each other authenticated themselves before updating their internal state variables. An attacker could send packets to one peer host, which could cascade to other peers, and stop the synchronization process among the reached peers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ntp: authentication doesn\u0027t protect symmetric associations against DoS attacks",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-1799"
},
{
"category": "external",
"summary": "RHBZ#1199435",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1199435"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-1799",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-1799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-1799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1799"
}
],
"release_date": "2015-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-19T04:03:04+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2231"
},
{
"category": "workaround",
"details": "To work around this issue, instead of configuring NTP hosts as peers with the \u0027peer\u0027 directive, use the \u0027server\u0027 directive on both hosts so that the connection uses a regular client/server mode of operation.\n\nMore information about how to configure NTP can be found at:\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/ch-Configuring_NTP_Using_ntpd.html\n\nAutokey authentication between NTP peers is not sufficient to fully mitigate this issue.",
"product_ids": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ntp: authentication doesn\u0027t protect symmetric associations against DoS attacks"
},
{
"cve": "CVE-2015-3405",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2015-04-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1210324"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way the ntp-keygen utility generated MD5 symmetric keys on big-endian systems. An attacker could possibly use this flaw to guess generated MD5 keys, which could then be used to spoof an NTP client or server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of ntp as shipped with Red Hat Enterprise Linux 5.\n\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-3405"
},
{
"category": "external",
"summary": "RHBZ#1210324",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1210324"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-3405",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-3405"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3405",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3405"
}
],
"release_date": "2015-04-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2015-11-19T04:03:04+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2015:2231"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"products": [
"7Client-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-0:4.2.6p5-22.el7.src",
"7Client-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Client-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-0:4.2.6p5-22.el7.src",
"7Client:ntp-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Client:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Client:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Client:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Client:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Client:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Client:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Client:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Client:sntp-0:4.2.6p5-22.el7.aarch64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64",
"7Client:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Client:sntp-0:4.2.6p5-22.el7.s390x",
"7Client:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.src",
"7ComputeNode:ntp-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.aarch64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.ppc64le",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.s390x",
"7ComputeNode:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-0:4.2.6p5-22.el7.src",
"7Server-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Server-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-0:4.2.6p5-22.el7.src",
"7Server:ntp-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Server:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Server:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Server:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Server:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Server:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Server:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Server:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Server:sntp-0:4.2.6p5-22.el7.aarch64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64",
"7Server:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Server:sntp-0:4.2.6p5-22.el7.s390x",
"7Server:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.src",
"7Workstation-optional:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation-optional:sntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-0:4.2.6p5-22.el7.src",
"7Workstation:ntp-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntp-debuginfo-0:4.2.6p5-22.el7.x86_64",
"7Workstation:ntp-doc-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntp-perl-0:4.2.6p5-22.el7.noarch",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.aarch64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.s390x",
"7Workstation:ntpdate-0:4.2.6p5-22.el7.x86_64",
"7Workstation:sntp-0:4.2.6p5-22.el7.aarch64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64",
"7Workstation:sntp-0:4.2.6p5-22.el7.ppc64le",
"7Workstation:sntp-0:4.2.6p5-22.el7.s390x",
"7Workstation:sntp-0:4.2.6p5-22.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems"
}
]
}
gsd-2015-1798
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2015-1798",
"description": "The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.",
"id": "GSD-2015-1798",
"references": [
"https://www.suse.com/security/cve/CVE-2015-1798.html",
"https://www.debian.org/security/2015/dsa-3223",
"https://access.redhat.com/errata/RHSA-2015:2231",
"https://access.redhat.com/errata/RHSA-2015:1459",
"https://ubuntu.com/security/CVE-2015-1798",
"https://advisories.mageia.org/CVE-2015-1798.html",
"https://alas.aws.amazon.com/cve/html/CVE-2015-1798.html",
"https://linux.oracle.com/cve/CVE-2015-1798.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2015-1798"
],
"details": "The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.",
"id": "GSD-2015-1798",
"modified": "2023-12-13T01:20:05.383620Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2015-1798",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"refsource": "MISC",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2015-1459.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1459.html"
},
{
"name": "http://www.debian.org/security/2015/dsa-3223",
"refsource": "MISC",
"url": "http://www.debian.org/security/2015/dsa-3223"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html",
"refsource": "MISC",
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
},
{
"name": "http://support.apple.com/kb/HT204942",
"refsource": "MISC",
"url": "http://support.apple.com/kb/HT204942"
},
{
"name": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html",
"refsource": "MISC",
"url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
},
{
"name": "http://bugs.ntp.org/show_bug.cgi?id=2779",
"refsource": "MISC",
"url": "http://bugs.ntp.org/show_bug.cgi?id=2779"
},
{
"name": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html",
"refsource": "MISC",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html"
},
{
"name": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html",
"refsource": "MISC",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html"
},
{
"name": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html"
},
{
"name": "http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2",
"refsource": "MISC",
"url": "http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2"
},
{
"name": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities",
"refsource": "MISC",
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
},
{
"name": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd",
"refsource": "MISC",
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd"
},
{
"name": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38276",
"refsource": "MISC",
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38276"
},
{
"name": "http://www.kb.cert.org/vuls/id/374268",
"refsource": "MISC",
"url": "http://www.kb.cert.org/vuls/id/374268"
},
{
"name": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:202",
"refsource": "MISC",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:202"
},
{
"name": "http://www.securityfocus.com/bid/73951",
"refsource": "MISC",
"url": "http://www.securityfocus.com/bid/73951"
},
{
"name": "http://www.securitytracker.com/id/1032032",
"refsource": "MISC",
"url": "http://www.securitytracker.com/id/1032032"
},
{
"name": "http://www.ubuntu.com/usn/USN-2567-1",
"refsource": "MISC",
"url": "http://www.ubuntu.com/usn/USN-2567-1"
},
{
"name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10114",
"refsource": "MISC",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10114"
},
{
"name": "https://security.gentoo.org/glsa/201509-01",
"refsource": "MISC",
"url": "https://security.gentoo.org/glsa/201509-01"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "4.2.7p444",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2015-1798"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-17"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://bugs.ntp.org/show_bug.cgi?id=2779",
"refsource": "CONFIRM",
"tags": [],
"url": "http://bugs.ntp.org/show_bug.cgi?id=2779"
},
{
"name": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities",
"refsource": "CONFIRM",
"tags": [
"Vendor Advisory"
],
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
},
{
"name": "VU#374268",
"refsource": "CERT-VN",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/374268"
},
{
"name": "20150408 Network Time Protocol Daemon MAC Checking Failure Authentication Bypass Vulnerability",
"refsource": "CISCO",
"tags": [],
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38276"
},
{
"name": "20150408 Multiple Vulnerabilities in ntpd (April 2015) Affecting Cisco Products",
"refsource": "CISCO",
"tags": [],
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd"
},
{
"name": "1032032",
"refsource": "SECTRACK",
"tags": [],
"url": "http://www.securitytracker.com/id/1032032"
},
{
"name": "MDVSA-2015:202",
"refsource": "MANDRIVA",
"tags": [],
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:202"
},
{
"name": "73951",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/73951"
},
{
"name": "DSA-3223",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2015/dsa-3223"
},
{
"name": "USN-2567-1",
"refsource": "UBUNTU",
"tags": [],
"url": "http://www.ubuntu.com/usn/USN-2567-1"
},
{
"name": "FEDORA-2015-5874",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html"
},
{
"name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10114",
"refsource": "CONFIRM",
"tags": [],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10114"
},
{
"name": "openSUSE-SU-2015:0775",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html"
},
{
"name": "FEDORA-2015-5761",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html"
},
{
"name": "APPLE-SA-2015-06-30-2",
"refsource": "APPLE",
"tags": [],
"url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
},
{
"name": "http://support.apple.com/kb/HT204942",
"refsource": "CONFIRM",
"tags": [],
"url": "http://support.apple.com/kb/HT204942"
},
{
"name": "SSRT102029",
"refsource": "HP",
"tags": [],
"url": "http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"name": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html",
"refsource": "CONFIRM",
"tags": [],
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
},
{
"name": "GLSA-201509-01",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/201509-01"
},
{
"name": "RHSA-2015:1459",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1459.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.8,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 3.2,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "LOW",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2023-02-12T23:15Z",
"publishedDate": "2015-04-08T10:59Z"
}
}
}
suse-su-2015:0865-1
Vulnerability from csaf_suse
Published
2015-04-28 12:17
Modified
2015-04-28 12:17
Summary
Security update for ntp
Notes
Title of the patch
Security update for ntp
Description of the patch
ntp was updated to fix two security related flaws as well as 'slew' mode handling for leap seconds.
The following vulnerabilities were fixe:
* ntpd could accept unauthenticated packets with symmetric key crypto. (CVE-2015-1798)
* ntpd authentication did not protect symmetric associations against DoS attacks (CVE-2015-1799)
* ntp-keygen may generate non-random symmetric keys on big-endian systems (bsc#928321, CVE-2015-3405).
The following non-security issues were fixed:
* Fix slew mode for leap seconds (bnc#918342).
Patchnames
SUSE-SLE-DESKTOP-12-2015-193,SUSE-SLE-SERVER-12-2015-193
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for ntp",
"title": "Title of the patch"
},
{
"category": "description",
"text": "ntp was updated to fix two security related flaws as well as \u0027slew\u0027 mode handling for leap seconds. \n\nThe following vulnerabilities were fixe:\n\n* ntpd could accept unauthenticated packets with symmetric key crypto. (CVE-2015-1798)\n* ntpd authentication did not protect symmetric associations against DoS attacks (CVE-2015-1799)\n* ntp-keygen may generate non-random symmetric keys on big-endian systems (bsc#928321, CVE-2015-3405).\n\nThe following non-security issues were fixed:\n\n* Fix slew mode for leap seconds (bnc#918342).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-2015-193,SUSE-SLE-SERVER-12-2015-193",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0865-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:0865-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20150865-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:0865-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-May/001378.html"
},
{
"category": "self",
"summary": "SUSE Bug 918342",
"url": "https://bugzilla.suse.com/918342"
},
{
"category": "self",
"summary": "SUSE Bug 924202",
"url": "https://bugzilla.suse.com/924202"
},
{
"category": "self",
"summary": "SUSE Bug 928321",
"url": "https://bugzilla.suse.com/928321"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1798 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1799 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3405 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3405/"
}
],
"title": "Security update for ntp",
"tracking": {
"current_release_date": "2015-04-28T12:17:23Z",
"generator": {
"date": "2015-04-28T12:17:23Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:0865-1",
"initial_release_date": "2015-04-28T12:17:23Z",
"revision_history": [
{
"date": "2015-04-28T12:17:23Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ntp-4.2.6p5-44.1.ppc64le",
"product": {
"name": "ntp-4.2.6p5-44.1.ppc64le",
"product_id": "ntp-4.2.6p5-44.1.ppc64le"
}
},
{
"category": "product_version",
"name": "ntp-doc-4.2.6p5-44.1.ppc64le",
"product": {
"name": "ntp-doc-4.2.6p5-44.1.ppc64le",
"product_id": "ntp-doc-4.2.6p5-44.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-4.2.6p5-44.1.s390x",
"product": {
"name": "ntp-4.2.6p5-44.1.s390x",
"product_id": "ntp-4.2.6p5-44.1.s390x"
}
},
{
"category": "product_version",
"name": "ntp-doc-4.2.6p5-44.1.s390x",
"product": {
"name": "ntp-doc-4.2.6p5-44.1.s390x",
"product_id": "ntp-doc-4.2.6p5-44.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-4.2.6p5-44.1.x86_64",
"product": {
"name": "ntp-4.2.6p5-44.1.x86_64",
"product_id": "ntp-4.2.6p5-44.1.x86_64"
}
},
{
"category": "product_version",
"name": "ntp-doc-4.2.6p5-44.1.x86_64",
"product": {
"name": "ntp-doc-4.2.6p5-44.1.x86_64",
"product_id": "ntp-doc-4.2.6p5-44.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12",
"product": {
"name": "SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12",
"product": {
"name": "SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-4.2.6p5-44.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:ntp-4.2.6p5-44.1.x86_64"
},
"product_reference": "ntp-4.2.6p5-44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-4.2.6p5-44.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.6p5-44.1.x86_64"
},
"product_reference": "ntp-doc-4.2.6p5-44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-4.2.6p5-44.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.ppc64le"
},
"product_reference": "ntp-4.2.6p5-44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-4.2.6p5-44.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.s390x"
},
"product_reference": "ntp-4.2.6p5-44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-4.2.6p5-44.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.x86_64"
},
"product_reference": "ntp-4.2.6p5-44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-4.2.6p5-44.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.ppc64le"
},
"product_reference": "ntp-doc-4.2.6p5-44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-4.2.6p5-44.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.s390x"
},
"product_reference": "ntp-doc-4.2.6p5-44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-4.2.6p5-44.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.x86_64"
},
"product_reference": "ntp-doc-4.2.6p5-44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-4.2.6p5-44.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.ppc64le"
},
"product_reference": "ntp-4.2.6p5-44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-4.2.6p5-44.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.s390x"
},
"product_reference": "ntp-4.2.6p5-44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-4.2.6p5-44.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.x86_64"
},
"product_reference": "ntp-4.2.6p5-44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-4.2.6p5-44.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.ppc64le"
},
"product_reference": "ntp-doc-4.2.6p5-44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-4.2.6p5-44.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.s390x"
},
"product_reference": "ntp-doc-4.2.6p5-44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-4.2.6p5-44.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.x86_64"
},
"product_reference": "ntp-doc-4.2.6p5-44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-1798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1798"
}
],
"notes": [
{
"category": "general",
"text": "The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1798",
"url": "https://www.suse.com/security/cve/CVE-2015-1798"
},
{
"category": "external",
"summary": "SUSE Bug 924202 for CVE-2015-1798",
"url": "https://bugzilla.suse.com/924202"
},
{
"category": "external",
"summary": "SUSE Bug 927497 for CVE-2015-1798",
"url": "https://bugzilla.suse.com/927497"
},
{
"category": "external",
"summary": "SUSE Bug 928321 for CVE-2015-1798",
"url": "https://bugzilla.suse.com/928321"
},
{
"category": "external",
"summary": "SUSE Bug 936327 for CVE-2015-1798",
"url": "https://bugzilla.suse.com/936327"
},
{
"category": "external",
"summary": "SUSE Bug 957163 for CVE-2015-1798",
"url": "https://bugzilla.suse.com/957163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-04-28T12:17:23Z",
"details": "important"
}
],
"title": "CVE-2015-1798"
},
{
"cve": "CVE-2015-1799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1799"
}
],
"notes": [
{
"category": "general",
"text": "The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service (synchronization loss) by spoofing the source IP address of a peer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1799",
"url": "https://www.suse.com/security/cve/CVE-2015-1799"
},
{
"category": "external",
"summary": "SUSE Bug 924202 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/924202"
},
{
"category": "external",
"summary": "SUSE Bug 927497 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/927497"
},
{
"category": "external",
"summary": "SUSE Bug 928321 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/928321"
},
{
"category": "external",
"summary": "SUSE Bug 936327 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/936327"
},
{
"category": "external",
"summary": "SUSE Bug 943565 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/943565"
},
{
"category": "external",
"summary": "SUSE Bug 957163 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/957163"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 962624 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/962624"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-04-28T12:17:23Z",
"details": "important"
}
],
"title": "CVE-2015-1799"
},
{
"cve": "CVE-2015-3405",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3405"
}
],
"notes": [
{
"category": "general",
"text": "ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 keys via a brute force attack with the 93 possible keys.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3405",
"url": "https://www.suse.com/security/cve/CVE-2015-3405"
},
{
"category": "external",
"summary": "SUSE Bug 924202 for CVE-2015-3405",
"url": "https://bugzilla.suse.com/924202"
},
{
"category": "external",
"summary": "SUSE Bug 928321 for CVE-2015-3405",
"url": "https://bugzilla.suse.com/928321"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-04-28T12:17:23Z",
"details": "important"
}
],
"title": "CVE-2015-3405"
}
]
}
fkie_cve-2015-1798
Vulnerability from fkie_nvd
Published
2015-04-08 10:59
Modified
2025-04-12 10:46
Severity ?
Summary
The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.
References
| ▶ | URL | Tags | |
|---|---|---|---|
| secalert@redhat.com | http://bugs.ntp.org/show_bug.cgi?id=2779 | ||
| secalert@redhat.com | http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html | ||
| secalert@redhat.com | http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html | ||
| secalert@redhat.com | http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html | ||
| secalert@redhat.com | http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html | ||
| secalert@redhat.com | http://marc.info/?l=bugtraq&m=143213867103400&w=2 | ||
| secalert@redhat.com | http://marc.info/?l=bugtraq&m=143213867103400&w=2 | ||
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2015-1459.html | ||
| secalert@redhat.com | http://support.apple.com/kb/HT204942 | ||
| secalert@redhat.com | http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities | Vendor Advisory | |
| secalert@redhat.com | http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd | ||
| secalert@redhat.com | http://tools.cisco.com/security/center/viewAlert.x?alertId=38276 | ||
| secalert@redhat.com | http://www.debian.org/security/2015/dsa-3223 | ||
| secalert@redhat.com | http://www.kb.cert.org/vuls/id/374268 | Third Party Advisory, US Government Resource | |
| secalert@redhat.com | http://www.mandriva.com/security/advisories?name=MDVSA-2015:202 | ||
| secalert@redhat.com | http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html | ||
| secalert@redhat.com | http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html | ||
| secalert@redhat.com | http://www.securityfocus.com/bid/73951 | ||
| secalert@redhat.com | http://www.securitytracker.com/id/1032032 | ||
| secalert@redhat.com | http://www.ubuntu.com/usn/USN-2567-1 | ||
| secalert@redhat.com | https://kc.mcafee.com/corporate/index?page=content&id=SB10114 | ||
| secalert@redhat.com | https://security.gentoo.org/glsa/201509-01 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://bugs.ntp.org/show_bug.cgi?id=2779 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://marc.info/?l=bugtraq&m=143213867103400&w=2 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://marc.info/?l=bugtraq&m=143213867103400&w=2 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2015-1459.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://support.apple.com/kb/HT204942 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://tools.cisco.com/security/center/viewAlert.x?alertId=38276 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.debian.org/security/2015/dsa-3223 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.kb.cert.org/vuls/id/374268 | Third Party Advisory, US Government Resource | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.mandriva.com/security/advisories?name=MDVSA-2015:202 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/73951 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id/1032032 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.ubuntu.com/usn/USN-2567-1 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://kc.mcafee.com/corporate/index?page=content&id=SB10114 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/201509-01 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E538FCAE-3E2C-4EA8-A74F-ABF47652C15C",
"versionEndIncluding": "4.2.7p444",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC."
},
{
"lang": "es",
"value": "La caracter\u00edstica symmetric-key en la funci\u00f3n receive en ntp_proto.c en ntpd en NTP 4.x anterior a 4.2.8p2 requiere un MAC correcto \u00fanicamente si el campo MAC tiene una longitud que no sea cero, lo que facilita a atacantes man-in-the-middle falsificar paquetes mediante la omisi\u00f3n del MAC."
}
],
"id": "CVE-2015-1798",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "LOW",
"cvssData": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.8,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:H/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 3.2,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2015-04-08T10:59:04.610",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://bugs.ntp.org/show_bug.cgi?id=2779"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html"
},
{
"source": "secalert@redhat.com",
"url": "http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2"
},
{
"source": "secalert@redhat.com",
"url": "http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2"
},
{
"source": "secalert@redhat.com",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1459.html"
},
{
"source": "secalert@redhat.com",
"url": "http://support.apple.com/kb/HT204942"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
},
{
"source": "secalert@redhat.com",
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd"
},
{
"source": "secalert@redhat.com",
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38276"
},
{
"source": "secalert@redhat.com",
"url": "http://www.debian.org/security/2015/dsa-3223"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/374268"
},
{
"source": "secalert@redhat.com",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:202"
},
{
"source": "secalert@redhat.com",
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
},
{
"source": "secalert@redhat.com",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/bid/73951"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securitytracker.com/id/1032032"
},
{
"source": "secalert@redhat.com",
"url": "http://www.ubuntu.com/usn/USN-2567-1"
},
{
"source": "secalert@redhat.com",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10114"
},
{
"source": "secalert@redhat.com",
"url": "https://security.gentoo.org/glsa/201509-01"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://bugs.ntp.org/show_bug.cgi?id=2779"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1459.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://support.apple.com/kb/HT204942"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38276"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2015/dsa-3223"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/374268"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:202"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/73951"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securitytracker.com/id/1032032"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.ubuntu.com/usn/USN-2567-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10114"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/201509-01"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-17"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
ghsa-cx2f-jc4r-m5vp
Vulnerability from github
Published
2022-05-14 03:59
Modified
2022-05-14 03:59
VLAI Severity ?
Details
The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.
{
"affected": [],
"aliases": [
"CVE-2015-1798"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2015-04-08T10:59:00Z",
"severity": "LOW"
},
"details": "The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.",
"id": "GHSA-cx2f-jc4r-m5vp",
"modified": "2022-05-14T03:59:23Z",
"published": "2022-05-14T03:59:23Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1798"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2015:1459"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2015:2231"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2015-1798"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1199430"
},
{
"type": "WEB",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10114"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201509-01"
},
{
"type": "WEB",
"url": "http://bugs.ntp.org/show_bug.cgi?id=2779"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2015-1459.html"
},
{
"type": "WEB",
"url": "http://support.apple.com/kb/HT204942"
},
{
"type": "WEB",
"url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
},
{
"type": "WEB",
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd"
},
{
"type": "WEB",
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38276"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2015/dsa-3223"
},
{
"type": "WEB",
"url": "http://www.kb.cert.org/vuls/id/374268"
},
{
"type": "WEB",
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:202"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/73951"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1032032"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-2567-1"
}
],
"schema_version": "1.4.0",
"severity": []
}
opensuse-su-2024:10181-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
ntp-4.2.8p9-1.1 on GA media
Notes
Title of the patch
ntp-4.2.8p9-1.1 on GA media
Description of the patch
These are all security issues fixed in the ntp-4.2.8p9-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10181
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "ntp-4.2.8p9-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the ntp-4.2.8p9-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10181",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10181-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2009-0159 page",
"url": "https://www.suse.com/security/cve/CVE-2009-0159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2009-1252 page",
"url": "https://www.suse.com/security/cve/CVE-2009-1252/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-5211 page",
"url": "https://www.suse.com/security/cve/CVE-2013-5211/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9293 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9293/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9294 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9294/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9295 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9295/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9296 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9296/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9297 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9297/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9298 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9298/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1798 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1799 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5300 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5300/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7691 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7692 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7692/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7701 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7702 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7702/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7703 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7703/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7704 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7705 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7848 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7848/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7849 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7849/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7850 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7851 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7851/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7852 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7853 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7854 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7855 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7871 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7871/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7973 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7974 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7975 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7975/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7976 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7976/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7977 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7978 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7979 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7979/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8138 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8138/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8158 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1547 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1547/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1548 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1549 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1550 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1550/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1551 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1551/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2516 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2517 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2518 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2518/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2519 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2519/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4953 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4953/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4954 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4954/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4955 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4955/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4956 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4957 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4957/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-7426 page",
"url": "https://www.suse.com/security/cve/CVE-2016-7426/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-7427 page",
"url": "https://www.suse.com/security/cve/CVE-2016-7427/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-7428 page",
"url": "https://www.suse.com/security/cve/CVE-2016-7428/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-7429 page",
"url": "https://www.suse.com/security/cve/CVE-2016-7429/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-7431 page",
"url": "https://www.suse.com/security/cve/CVE-2016-7431/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-7433 page",
"url": "https://www.suse.com/security/cve/CVE-2016-7433/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-7434 page",
"url": "https://www.suse.com/security/cve/CVE-2016-7434/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9310 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9310/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-9311 page",
"url": "https://www.suse.com/security/cve/CVE-2016-9311/"
}
],
"title": "ntp-4.2.8p9-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10181-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ntp-4.2.8p9-1.1.aarch64",
"product": {
"name": "ntp-4.2.8p9-1.1.aarch64",
"product_id": "ntp-4.2.8p9-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "ntp-doc-4.2.8p9-1.1.aarch64",
"product": {
"name": "ntp-doc-4.2.8p9-1.1.aarch64",
"product_id": "ntp-doc-4.2.8p9-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-4.2.8p9-1.1.ppc64le",
"product": {
"name": "ntp-4.2.8p9-1.1.ppc64le",
"product_id": "ntp-4.2.8p9-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "ntp-doc-4.2.8p9-1.1.ppc64le",
"product": {
"name": "ntp-doc-4.2.8p9-1.1.ppc64le",
"product_id": "ntp-doc-4.2.8p9-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-4.2.8p9-1.1.s390x",
"product": {
"name": "ntp-4.2.8p9-1.1.s390x",
"product_id": "ntp-4.2.8p9-1.1.s390x"
}
},
{
"category": "product_version",
"name": "ntp-doc-4.2.8p9-1.1.s390x",
"product": {
"name": "ntp-doc-4.2.8p9-1.1.s390x",
"product_id": "ntp-doc-4.2.8p9-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ntp-4.2.8p9-1.1.x86_64",
"product": {
"name": "ntp-4.2.8p9-1.1.x86_64",
"product_id": "ntp-4.2.8p9-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "ntp-doc-4.2.8p9-1.1.x86_64",
"product": {
"name": "ntp-doc-4.2.8p9-1.1.x86_64",
"product_id": "ntp-doc-4.2.8p9-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-4.2.8p9-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64"
},
"product_reference": "ntp-4.2.8p9-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-4.2.8p9-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le"
},
"product_reference": "ntp-4.2.8p9-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-4.2.8p9-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x"
},
"product_reference": "ntp-4.2.8p9-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-4.2.8p9-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64"
},
"product_reference": "ntp-4.2.8p9-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-4.2.8p9-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64"
},
"product_reference": "ntp-doc-4.2.8p9-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-4.2.8p9-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le"
},
"product_reference": "ntp-doc-4.2.8p9-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-4.2.8p9-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x"
},
"product_reference": "ntp-doc-4.2.8p9-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ntp-doc-4.2.8p9-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
},
"product_reference": "ntp-doc-4.2.8p9-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-0159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2009-0159"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2009-0159",
"url": "https://www.suse.com/security/cve/CVE-2009-0159"
},
{
"category": "external",
"summary": "SUSE Bug 484653 for CVE-2009-0159",
"url": "https://bugzilla.suse.com/484653"
},
{
"category": "external",
"summary": "SUSE Bug 501632 for CVE-2009-0159",
"url": "https://bugzilla.suse.com/501632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2009-0159"
},
{
"cve": "CVE-2009-1252",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2009-1252"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2009-1252",
"url": "https://www.suse.com/security/cve/CVE-2009-1252"
},
{
"category": "external",
"summary": "SUSE Bug 501632 for CVE-2009-1252",
"url": "https://bugzilla.suse.com/501632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2009-1252"
},
{
"cve": "CVE-2013-5211",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-5211"
}
],
"notes": [
{
"category": "general",
"text": "The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-5211",
"url": "https://www.suse.com/security/cve/CVE-2013-5211"
},
{
"category": "external",
"summary": "SUSE Bug 857195 for CVE-2013-5211",
"url": "https://bugzilla.suse.com/857195"
},
{
"category": "external",
"summary": "SUSE Bug 889447 for CVE-2013-5211",
"url": "https://bugzilla.suse.com/889447"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2013-5211",
"url": "https://bugzilla.suse.com/959243"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-5211"
},
{
"cve": "CVE-2014-9293",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9293"
}
],
"notes": [
{
"category": "general",
"text": "The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9293",
"url": "https://www.suse.com/security/cve/CVE-2014-9293"
},
{
"category": "external",
"summary": "SUSE Bug 910764 for CVE-2014-9293",
"url": "https://bugzilla.suse.com/910764"
},
{
"category": "external",
"summary": "SUSE Bug 911053 for CVE-2014-9293",
"url": "https://bugzilla.suse.com/911053"
},
{
"category": "external",
"summary": "SUSE Bug 911792 for CVE-2014-9293",
"url": "https://bugzilla.suse.com/911792"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2014-9293",
"url": "https://bugzilla.suse.com/959243"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-9293"
},
{
"cve": "CVE-2014-9294",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9294"
}
],
"notes": [
{
"category": "general",
"text": "util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9294",
"url": "https://www.suse.com/security/cve/CVE-2014-9294"
},
{
"category": "external",
"summary": "SUSE Bug 910764 for CVE-2014-9294",
"url": "https://bugzilla.suse.com/910764"
},
{
"category": "external",
"summary": "SUSE Bug 911053 for CVE-2014-9294",
"url": "https://bugzilla.suse.com/911053"
},
{
"category": "external",
"summary": "SUSE Bug 911792 for CVE-2014-9294",
"url": "https://bugzilla.suse.com/911792"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2014-9294",
"url": "https://bugzilla.suse.com/959243"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-9294"
},
{
"cve": "CVE-2014-9295",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9295"
}
],
"notes": [
{
"category": "general",
"text": "Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9295",
"url": "https://www.suse.com/security/cve/CVE-2014-9295"
},
{
"category": "external",
"summary": "SUSE Bug 910764 for CVE-2014-9295",
"url": "https://bugzilla.suse.com/910764"
},
{
"category": "external",
"summary": "SUSE Bug 911053 for CVE-2014-9295",
"url": "https://bugzilla.suse.com/911053"
},
{
"category": "external",
"summary": "SUSE Bug 911792 for CVE-2014-9295",
"url": "https://bugzilla.suse.com/911792"
},
{
"category": "external",
"summary": "SUSE Bug 916239 for CVE-2014-9295",
"url": "https://bugzilla.suse.com/916239"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2014-9295",
"url": "https://bugzilla.suse.com/959243"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-9295"
},
{
"cve": "CVE-2014-9296",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9296"
}
],
"notes": [
{
"category": "general",
"text": "The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote attackers to trigger an unintended association change via crafted packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9296",
"url": "https://www.suse.com/security/cve/CVE-2014-9296"
},
{
"category": "external",
"summary": "SUSE Bug 910764 for CVE-2014-9296",
"url": "https://bugzilla.suse.com/910764"
},
{
"category": "external",
"summary": "SUSE Bug 911053 for CVE-2014-9296",
"url": "https://bugzilla.suse.com/911053"
},
{
"category": "external",
"summary": "SUSE Bug 911792 for CVE-2014-9296",
"url": "https://bugzilla.suse.com/911792"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2014-9296",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2014-9296",
"url": "https://bugzilla.suse.com/992991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-9296"
},
{
"cve": "CVE-2014-9297",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9297"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9750, CVE-2014-9751. Reason: this ID was intended for one issue, but was associated with two issues. Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9297",
"url": "https://www.suse.com/security/cve/CVE-2014-9297"
},
{
"category": "external",
"summary": "SUSE Bug 911792 for CVE-2014-9297",
"url": "https://bugzilla.suse.com/911792"
},
{
"category": "external",
"summary": "SUSE Bug 948963 for CVE-2014-9297",
"url": "https://bugzilla.suse.com/948963"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2014-9297",
"url": "https://bugzilla.suse.com/959243"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-9297"
},
{
"cve": "CVE-2014-9298",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9298"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9750, CVE-2014-9751. Reason: this ID was intended for one issue, but was associated with two issues. Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9298",
"url": "https://www.suse.com/security/cve/CVE-2014-9298"
},
{
"category": "external",
"summary": "SUSE Bug 911792 for CVE-2014-9298",
"url": "https://bugzilla.suse.com/911792"
},
{
"category": "external",
"summary": "SUSE Bug 948963 for CVE-2014-9298",
"url": "https://bugzilla.suse.com/948963"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2014-9298",
"url": "https://bugzilla.suse.com/959243"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-9298"
},
{
"cve": "CVE-2015-1798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1798"
}
],
"notes": [
{
"category": "general",
"text": "The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1798",
"url": "https://www.suse.com/security/cve/CVE-2015-1798"
},
{
"category": "external",
"summary": "SUSE Bug 924202 for CVE-2015-1798",
"url": "https://bugzilla.suse.com/924202"
},
{
"category": "external",
"summary": "SUSE Bug 927497 for CVE-2015-1798",
"url": "https://bugzilla.suse.com/927497"
},
{
"category": "external",
"summary": "SUSE Bug 928321 for CVE-2015-1798",
"url": "https://bugzilla.suse.com/928321"
},
{
"category": "external",
"summary": "SUSE Bug 936327 for CVE-2015-1798",
"url": "https://bugzilla.suse.com/936327"
},
{
"category": "external",
"summary": "SUSE Bug 957163 for CVE-2015-1798",
"url": "https://bugzilla.suse.com/957163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1798"
},
{
"cve": "CVE-2015-1799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1799"
}
],
"notes": [
{
"category": "general",
"text": "The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service (synchronization loss) by spoofing the source IP address of a peer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1799",
"url": "https://www.suse.com/security/cve/CVE-2015-1799"
},
{
"category": "external",
"summary": "SUSE Bug 924202 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/924202"
},
{
"category": "external",
"summary": "SUSE Bug 927497 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/927497"
},
{
"category": "external",
"summary": "SUSE Bug 928321 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/928321"
},
{
"category": "external",
"summary": "SUSE Bug 936327 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/936327"
},
{
"category": "external",
"summary": "SUSE Bug 943565 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/943565"
},
{
"category": "external",
"summary": "SUSE Bug 957163 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/957163"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 962624 for CVE-2015-1799",
"url": "https://bugzilla.suse.com/962624"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-1799"
},
{
"cve": "CVE-2015-5300",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5300"
}
],
"notes": [
{
"category": "general",
"text": "The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5300",
"url": "https://www.suse.com/security/cve/CVE-2015-5300"
},
{
"category": "external",
"summary": "SUSE Bug 951629 for CVE-2015-5300",
"url": "https://bugzilla.suse.com/951629"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-5300",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 962624 for CVE-2015-5300",
"url": "https://bugzilla.suse.com/962624"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-5300"
},
{
"cve": "CVE-2015-7691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7691"
}
],
"notes": [
{
"category": "general",
"text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7691",
"url": "https://www.suse.com/security/cve/CVE-2015-7691"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7691",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 911792 for CVE-2015-7691",
"url": "https://bugzilla.suse.com/911792"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7691",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7691",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-7691",
"url": "https://bugzilla.suse.com/992991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-7691"
},
{
"cve": "CVE-2015-7692",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7692"
}
],
"notes": [
{
"category": "general",
"text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7692",
"url": "https://www.suse.com/security/cve/CVE-2015-7692"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7692",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 911792 for CVE-2015-7692",
"url": "https://bugzilla.suse.com/911792"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7692",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7692",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-7692",
"url": "https://bugzilla.suse.com/992991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-7692"
},
{
"cve": "CVE-2015-7701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7701"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7701",
"url": "https://www.suse.com/security/cve/CVE-2015-7701"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7701",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7701",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7701",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-7701",
"url": "https://bugzilla.suse.com/992991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-7701"
},
{
"cve": "CVE-2015-7702",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7702"
}
],
"notes": [
{
"category": "general",
"text": "The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7702",
"url": "https://www.suse.com/security/cve/CVE-2015-7702"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7702",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 911792 for CVE-2015-7702",
"url": "https://bugzilla.suse.com/911792"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7702",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7702",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-7702",
"url": "https://bugzilla.suse.com/992991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-7702"
},
{
"cve": "CVE-2015-7703",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7703"
}
],
"notes": [
{
"category": "general",
"text": "The \"pidfile\" or \"driftfile\" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7703",
"url": "https://www.suse.com/security/cve/CVE-2015-7703"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7703",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 943216 for CVE-2015-7703",
"url": "https://bugzilla.suse.com/943216"
},
{
"category": "external",
"summary": "SUSE Bug 943218 for CVE-2015-7703",
"url": "https://bugzilla.suse.com/943218"
},
{
"category": "external",
"summary": "SUSE Bug 943219 for CVE-2015-7703",
"url": "https://bugzilla.suse.com/943219"
},
{
"category": "external",
"summary": "SUSE Bug 943221 for CVE-2015-7703",
"url": "https://bugzilla.suse.com/943221"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7703",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7703",
"url": "https://bugzilla.suse.com/959243"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-7703"
},
{
"cve": "CVE-2015-7704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7704"
}
],
"notes": [
{
"category": "general",
"text": "The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted \"KOD\" messages.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7704",
"url": "https://www.suse.com/security/cve/CVE-2015-7704"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7704",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7704",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 952611 for CVE-2015-7704",
"url": "https://bugzilla.suse.com/952611"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7704",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 977446 for CVE-2015-7704",
"url": "https://bugzilla.suse.com/977446"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-7704"
},
{
"cve": "CVE-2015-7705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7705"
}
],
"notes": [
{
"category": "general",
"text": "The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7705",
"url": "https://www.suse.com/security/cve/CVE-2015-7705"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7705",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7705",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 952611 for CVE-2015-7705",
"url": "https://bugzilla.suse.com/952611"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7705",
"url": "https://bugzilla.suse.com/959243"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-7705"
},
{
"cve": "CVE-2015-7848",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7848"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7848",
"url": "https://www.suse.com/security/cve/CVE-2015-7848"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7848",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7848",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7848",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-7848",
"url": "https://bugzilla.suse.com/992991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-7848"
},
{
"cve": "CVE-2015-7849",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7849"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7849",
"url": "https://www.suse.com/security/cve/CVE-2015-7849"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7849",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7849",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7849",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-7849",
"url": "https://bugzilla.suse.com/992991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-7849"
},
{
"cve": "CVE-2015-7850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7850"
}
],
"notes": [
{
"category": "general",
"text": "ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7850",
"url": "https://www.suse.com/security/cve/CVE-2015-7850"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7850",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7850",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7850",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-7850",
"url": "https://bugzilla.suse.com/992991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7850"
},
{
"cve": "CVE-2015-7851",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7851"
}
],
"notes": [
{
"category": "general",
"text": "Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use \u0027\\\u0027 or \u0027/\u0027 characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7851",
"url": "https://www.suse.com/security/cve/CVE-2015-7851"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7851",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7851",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7851",
"url": "https://bugzilla.suse.com/959243"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7851"
},
{
"cve": "CVE-2015-7852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7852"
}
],
"notes": [
{
"category": "general",
"text": "ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7852",
"url": "https://www.suse.com/security/cve/CVE-2015-7852"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7852",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7852",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7852",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-7852",
"url": "https://bugzilla.suse.com/992991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7852"
},
{
"cve": "CVE-2015-7853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7853"
}
],
"notes": [
{
"category": "general",
"text": "The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7853",
"url": "https://www.suse.com/security/cve/CVE-2015-7853"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7853",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7853",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7853",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-7853",
"url": "https://bugzilla.suse.com/992991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-7853"
},
{
"cve": "CVE-2015-7854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7854"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7854",
"url": "https://www.suse.com/security/cve/CVE-2015-7854"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7854",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7854",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7854",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-7854",
"url": "https://bugzilla.suse.com/992991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-7854"
},
{
"cve": "CVE-2015-7855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7855"
}
],
"notes": [
{
"category": "general",
"text": "The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7855",
"url": "https://www.suse.com/security/cve/CVE-2015-7855"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7855",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7855",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7855",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-7855",
"url": "https://bugzilla.suse.com/992991"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7855"
},
{
"cve": "CVE-2015-7871",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7871"
}
],
"notes": [
{
"category": "general",
"text": "Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7871",
"url": "https://www.suse.com/security/cve/CVE-2015-7871"
},
{
"category": "external",
"summary": "SUSE Bug 1010964 for CVE-2015-7871",
"url": "https://bugzilla.suse.com/1010964"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-7871",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 952606 for CVE-2015-7871",
"url": "https://bugzilla.suse.com/952606"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7871",
"url": "https://bugzilla.suse.com/959243"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-7871"
},
{
"cve": "CVE-2015-7973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7973"
}
],
"notes": [
{
"category": "general",
"text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7973",
"url": "https://www.suse.com/security/cve/CVE-2015-7973"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7973",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 962995 for CVE-2015-7973",
"url": "https://bugzilla.suse.com/962995"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7973"
},
{
"cve": "CVE-2015-7974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7974"
}
],
"notes": [
{
"category": "general",
"text": "NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a \"skeleton key.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7974",
"url": "https://www.suse.com/security/cve/CVE-2015-7974"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7974",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 962960 for CVE-2015-7974",
"url": "https://bugzilla.suse.com/962960"
},
{
"category": "external",
"summary": "SUSE Bug 962995 for CVE-2015-7974",
"url": "https://bugzilla.suse.com/962995"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7974"
},
{
"cve": "CVE-2015-7975",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7975"
}
],
"notes": [
{
"category": "general",
"text": "The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7975",
"url": "https://www.suse.com/security/cve/CVE-2015-7975"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7975",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 962988 for CVE-2015-7975",
"url": "https://bugzilla.suse.com/962988"
},
{
"category": "external",
"summary": "SUSE Bug 962995 for CVE-2015-7975",
"url": "https://bugzilla.suse.com/962995"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7975"
},
{
"cve": "CVE-2015-7976",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7976"
}
],
"notes": [
{
"category": "general",
"text": "The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7976",
"url": "https://www.suse.com/security/cve/CVE-2015-7976"
},
{
"category": "external",
"summary": "SUSE Bug 962802 for CVE-2015-7976",
"url": "https://bugzilla.suse.com/962802"
},
{
"category": "external",
"summary": "SUSE Bug 962995 for CVE-2015-7976",
"url": "https://bugzilla.suse.com/962995"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7976"
},
{
"cve": "CVE-2015-7977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7977"
}
],
"notes": [
{
"category": "general",
"text": "ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7977",
"url": "https://www.suse.com/security/cve/CVE-2015-7977"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7977",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 962970 for CVE-2015-7977",
"url": "https://bugzilla.suse.com/962970"
},
{
"category": "external",
"summary": "SUSE Bug 962995 for CVE-2015-7977",
"url": "https://bugzilla.suse.com/962995"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7977"
},
{
"cve": "CVE-2015-7978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7978"
}
],
"notes": [
{
"category": "general",
"text": "NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7978",
"url": "https://www.suse.com/security/cve/CVE-2015-7978"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7978",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 962970 for CVE-2015-7978",
"url": "https://bugzilla.suse.com/962970"
},
{
"category": "external",
"summary": "SUSE Bug 962995 for CVE-2015-7978",
"url": "https://bugzilla.suse.com/962995"
},
{
"category": "external",
"summary": "SUSE Bug 963000 for CVE-2015-7978",
"url": "https://bugzilla.suse.com/963000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7978"
},
{
"cve": "CVE-2015-7979",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7979"
}
],
"notes": [
{
"category": "general",
"text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7979",
"url": "https://www.suse.com/security/cve/CVE-2015-7979"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-7979",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 962784 for CVE-2015-7979",
"url": "https://bugzilla.suse.com/962784"
},
{
"category": "external",
"summary": "SUSE Bug 962995 for CVE-2015-7979",
"url": "https://bugzilla.suse.com/962995"
},
{
"category": "external",
"summary": "SUSE Bug 977459 for CVE-2015-7979",
"url": "https://bugzilla.suse.com/977459"
},
{
"category": "external",
"summary": "SUSE Bug 982065 for CVE-2015-7979",
"url": "https://bugzilla.suse.com/982065"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7979"
},
{
"cve": "CVE-2015-8138",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8138"
}
],
"notes": [
{
"category": "general",
"text": "NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8138",
"url": "https://www.suse.com/security/cve/CVE-2015-8138"
},
{
"category": "external",
"summary": "SUSE Bug 951608 for CVE-2015-8138",
"url": "https://bugzilla.suse.com/951608"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-8138",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 963002 for CVE-2015-8138",
"url": "https://bugzilla.suse.com/963002"
},
{
"category": "external",
"summary": "SUSE Bug 974668 for CVE-2015-8138",
"url": "https://bugzilla.suse.com/974668"
},
{
"category": "external",
"summary": "SUSE Bug 977446 for CVE-2015-8138",
"url": "https://bugzilla.suse.com/977446"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8138"
},
{
"cve": "CVE-2015-8158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8158"
}
],
"notes": [
{
"category": "general",
"text": "The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8158",
"url": "https://www.suse.com/security/cve/CVE-2015-8158"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2015-8158",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 962966 for CVE-2015-8158",
"url": "https://bugzilla.suse.com/962966"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-8158"
},
{
"cve": "CVE-2016-1547",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1547"
}
],
"notes": [
{
"category": "general",
"text": "An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1547",
"url": "https://www.suse.com/security/cve/CVE-2016-1547"
},
{
"category": "external",
"summary": "SUSE Bug 962784 for CVE-2016-1547",
"url": "https://bugzilla.suse.com/962784"
},
{
"category": "external",
"summary": "SUSE Bug 977446 for CVE-2016-1547",
"url": "https://bugzilla.suse.com/977446"
},
{
"category": "external",
"summary": "SUSE Bug 977459 for CVE-2016-1547",
"url": "https://bugzilla.suse.com/977459"
},
{
"category": "external",
"summary": "SUSE Bug 982064 for CVE-2016-1547",
"url": "https://bugzilla.suse.com/982064"
},
{
"category": "external",
"summary": "SUSE Bug 982065 for CVE-2016-1547",
"url": "https://bugzilla.suse.com/982065"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1547"
},
{
"cve": "CVE-2016-1548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1548"
}
],
"notes": [
{
"category": "general",
"text": "An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-\u003edst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1548",
"url": "https://www.suse.com/security/cve/CVE-2016-1548"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2016-1548",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 977446 for CVE-2016-1548",
"url": "https://bugzilla.suse.com/977446"
},
{
"category": "external",
"summary": "SUSE Bug 977461 for CVE-2016-1548",
"url": "https://bugzilla.suse.com/977461"
},
{
"category": "external",
"summary": "SUSE Bug 982068 for CVE-2016-1548",
"url": "https://bugzilla.suse.com/982068"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1548"
},
{
"cve": "CVE-2016-1549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1549"
}
],
"notes": [
{
"category": "general",
"text": "A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim\u0027s clock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1549",
"url": "https://www.suse.com/security/cve/CVE-2016-1549"
},
{
"category": "external",
"summary": "SUSE Bug 1083424 for CVE-2016-1549",
"url": "https://bugzilla.suse.com/1083424"
},
{
"category": "external",
"summary": "SUSE Bug 977446 for CVE-2016-1549",
"url": "https://bugzilla.suse.com/977446"
},
{
"category": "external",
"summary": "SUSE Bug 977451 for CVE-2016-1549",
"url": "https://bugzilla.suse.com/977451"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-1549"
},
{
"cve": "CVE-2016-1550",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1550"
}
],
"notes": [
{
"category": "general",
"text": "An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1550",
"url": "https://www.suse.com/security/cve/CVE-2016-1550"
},
{
"category": "external",
"summary": "SUSE Bug 977446 for CVE-2016-1550",
"url": "https://bugzilla.suse.com/977446"
},
{
"category": "external",
"summary": "SUSE Bug 977464 for CVE-2016-1550",
"url": "https://bugzilla.suse.com/977464"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-1550"
},
{
"cve": "CVE-2016-1551",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1551"
}
],
"notes": [
{
"category": "general",
"text": "ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference clocks are treated like other peers and stored in the same structure, any packet with a source ip address of a reference clock (127.127.1.1 for example) that reaches the receive() function will match that reference clock\u0027s peer record and will be treated as a trusted peer. Any system that lacks the typical martian packet filtering which would block these packets is in danger of having its time controlled by an attacker.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1551",
"url": "https://www.suse.com/security/cve/CVE-2016-1551"
},
{
"category": "external",
"summary": "SUSE Bug 977446 for CVE-2016-1551",
"url": "https://bugzilla.suse.com/977446"
},
{
"category": "external",
"summary": "SUSE Bug 977450 for CVE-2016-1551",
"url": "https://bugzilla.suse.com/977450"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-1551"
},
{
"cve": "CVE-2016-2516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2516"
}
],
"notes": [
{
"category": "general",
"text": "NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service (ntpd abort) by using the same IP address multiple times in an unconfig directive.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2516",
"url": "https://www.suse.com/security/cve/CVE-2016-2516"
},
{
"category": "external",
"summary": "SUSE Bug 977446 for CVE-2016-2516",
"url": "https://bugzilla.suse.com/977446"
},
{
"category": "external",
"summary": "SUSE Bug 977452 for CVE-2016-2516",
"url": "https://bugzilla.suse.com/977452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-2516"
},
{
"cve": "CVE-2016-2517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2517"
}
],
"notes": [
{
"category": "general",
"text": "NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, controlkey, or requestkey. NOTE: this vulnerability exists because of a CVE-2016-2516 regression.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2517",
"url": "https://www.suse.com/security/cve/CVE-2016-2517"
},
{
"category": "external",
"summary": "SUSE Bug 977446 for CVE-2016-2517",
"url": "https://bugzilla.suse.com/977446"
},
{
"category": "external",
"summary": "SUSE Bug 977455 for CVE-2016-2517",
"url": "https://bugzilla.suse.com/977455"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-2517"
},
{
"cve": "CVE-2016-2518",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2518"
}
],
"notes": [
{
"category": "general",
"text": "The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2518",
"url": "https://www.suse.com/security/cve/CVE-2016-2518"
},
{
"category": "external",
"summary": "SUSE Bug 977446 for CVE-2016-2518",
"url": "https://bugzilla.suse.com/977446"
},
{
"category": "external",
"summary": "SUSE Bug 977457 for CVE-2016-2518",
"url": "https://bugzilla.suse.com/977457"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-2518"
},
{
"cve": "CVE-2016-2519",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2519"
}
],
"notes": [
{
"category": "general",
"text": "ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2519",
"url": "https://www.suse.com/security/cve/CVE-2016-2519"
},
{
"category": "external",
"summary": "SUSE Bug 959243 for CVE-2016-2519",
"url": "https://bugzilla.suse.com/959243"
},
{
"category": "external",
"summary": "SUSE Bug 977446 for CVE-2016-2519",
"url": "https://bugzilla.suse.com/977446"
},
{
"category": "external",
"summary": "SUSE Bug 977458 for CVE-2016-2519",
"url": "https://bugzilla.suse.com/977458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-2519"
},
{
"cve": "CVE-2016-4953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4953"
}
],
"notes": [
{
"category": "general",
"text": "ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4953",
"url": "https://www.suse.com/security/cve/CVE-2016-4953"
},
{
"category": "external",
"summary": "SUSE Bug 962784 for CVE-2016-4953",
"url": "https://bugzilla.suse.com/962784"
},
{
"category": "external",
"summary": "SUSE Bug 977459 for CVE-2016-4953",
"url": "https://bugzilla.suse.com/977459"
},
{
"category": "external",
"summary": "SUSE Bug 982056 for CVE-2016-4953",
"url": "https://bugzilla.suse.com/982056"
},
{
"category": "external",
"summary": "SUSE Bug 982065 for CVE-2016-4953",
"url": "https://bugzilla.suse.com/982065"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4953"
},
{
"cve": "CVE-2016-4954",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4954"
}
],
"notes": [
{
"category": "general",
"text": "The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4954",
"url": "https://www.suse.com/security/cve/CVE-2016-4954"
},
{
"category": "external",
"summary": "SUSE Bug 982056 for CVE-2016-4954",
"url": "https://bugzilla.suse.com/982056"
},
{
"category": "external",
"summary": "SUSE Bug 982066 for CVE-2016-4954",
"url": "https://bugzilla.suse.com/982066"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4954"
},
{
"cve": "CVE-2016-4955",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4955"
}
],
"notes": [
{
"category": "general",
"text": "ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4955",
"url": "https://www.suse.com/security/cve/CVE-2016-4955"
},
{
"category": "external",
"summary": "SUSE Bug 982056 for CVE-2016-4955",
"url": "https://bugzilla.suse.com/982056"
},
{
"category": "external",
"summary": "SUSE Bug 982067 for CVE-2016-4955",
"url": "https://bugzilla.suse.com/982067"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4955"
},
{
"cve": "CVE-2016-4956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4956"
}
],
"notes": [
{
"category": "general",
"text": "ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4956",
"url": "https://www.suse.com/security/cve/CVE-2016-4956"
},
{
"category": "external",
"summary": "SUSE Bug 977461 for CVE-2016-4956",
"url": "https://bugzilla.suse.com/977461"
},
{
"category": "external",
"summary": "SUSE Bug 982056 for CVE-2016-4956",
"url": "https://bugzilla.suse.com/982056"
},
{
"category": "external",
"summary": "SUSE Bug 982068 for CVE-2016-4956",
"url": "https://bugzilla.suse.com/982068"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4956"
},
{
"cve": "CVE-2016-4957",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4957"
}
],
"notes": [
{
"category": "general",
"text": "ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4957",
"url": "https://www.suse.com/security/cve/CVE-2016-4957"
},
{
"category": "external",
"summary": "SUSE Bug 977459 for CVE-2016-4957",
"url": "https://bugzilla.suse.com/977459"
},
{
"category": "external",
"summary": "SUSE Bug 982056 for CVE-2016-4957",
"url": "https://bugzilla.suse.com/982056"
},
{
"category": "external",
"summary": "SUSE Bug 982064 for CVE-2016-4957",
"url": "https://bugzilla.suse.com/982064"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4957"
},
{
"cve": "CVE-2016-7426",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-7426"
}
],
"notes": [
{
"category": "general",
"text": "NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-7426",
"url": "https://www.suse.com/security/cve/CVE-2016-7426"
},
{
"category": "external",
"summary": "SUSE Bug 1011406 for CVE-2016-7426",
"url": "https://bugzilla.suse.com/1011406"
},
{
"category": "external",
"summary": "SUSE Bug 1011421 for CVE-2016-7426",
"url": "https://bugzilla.suse.com/1011421"
},
{
"category": "external",
"summary": "SUSE Bug 1012330 for CVE-2016-7426",
"url": "https://bugzilla.suse.com/1012330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-7426"
},
{
"cve": "CVE-2016-7427",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-7427"
}
],
"notes": [
{
"category": "general",
"text": "The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via a crafted broadcast mode packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-7427",
"url": "https://www.suse.com/security/cve/CVE-2016-7427"
},
{
"category": "external",
"summary": "SUSE Bug 1011390 for CVE-2016-7427",
"url": "https://bugzilla.suse.com/1011390"
},
{
"category": "external",
"summary": "SUSE Bug 1011421 for CVE-2016-7427",
"url": "https://bugzilla.suse.com/1011421"
},
{
"category": "external",
"summary": "SUSE Bug 1012330 for CVE-2016-7427",
"url": "https://bugzilla.suse.com/1012330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-7427"
},
{
"cve": "CVE-2016-7428",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-7428"
}
],
"notes": [
{
"category": "general",
"text": "ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via the poll interval in a broadcast packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-7428",
"url": "https://www.suse.com/security/cve/CVE-2016-7428"
},
{
"category": "external",
"summary": "SUSE Bug 1011417 for CVE-2016-7428",
"url": "https://bugzilla.suse.com/1011417"
},
{
"category": "external",
"summary": "SUSE Bug 1011421 for CVE-2016-7428",
"url": "https://bugzilla.suse.com/1011421"
},
{
"category": "external",
"summary": "SUSE Bug 1012330 for CVE-2016-7428",
"url": "https://bugzilla.suse.com/1012330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-7428"
},
{
"cve": "CVE-2016-7429",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-7429"
}
],
"notes": [
{
"category": "general",
"text": "NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a source) by sending a response for a source to an interface the source does not use.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-7429",
"url": "https://www.suse.com/security/cve/CVE-2016-7429"
},
{
"category": "external",
"summary": "SUSE Bug 1011404 for CVE-2016-7429",
"url": "https://bugzilla.suse.com/1011404"
},
{
"category": "external",
"summary": "SUSE Bug 1011421 for CVE-2016-7429",
"url": "https://bugzilla.suse.com/1011421"
},
{
"category": "external",
"summary": "SUSE Bug 1012330 for CVE-2016-7429",
"url": "https://bugzilla.suse.com/1012330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-7429"
},
{
"cve": "CVE-2016-7431",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-7431"
}
],
"notes": [
{
"category": "general",
"text": "NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-7431",
"url": "https://www.suse.com/security/cve/CVE-2016-7431"
},
{
"category": "external",
"summary": "SUSE Bug 1011395 for CVE-2016-7431",
"url": "https://bugzilla.suse.com/1011395"
},
{
"category": "external",
"summary": "SUSE Bug 1011421 for CVE-2016-7431",
"url": "https://bugzilla.suse.com/1011421"
},
{
"category": "external",
"summary": "SUSE Bug 1012330 for CVE-2016-7431",
"url": "https://bugzilla.suse.com/1012330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-7431"
},
{
"cve": "CVE-2016-7433",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-7433"
}
],
"notes": [
{
"category": "general",
"text": "NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a \"root distance that did not include the peer dispersion.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-7433",
"url": "https://www.suse.com/security/cve/CVE-2016-7433"
},
{
"category": "external",
"summary": "SUSE Bug 1011411 for CVE-2016-7433",
"url": "https://bugzilla.suse.com/1011411"
},
{
"category": "external",
"summary": "SUSE Bug 1011421 for CVE-2016-7433",
"url": "https://bugzilla.suse.com/1011421"
},
{
"category": "external",
"summary": "SUSE Bug 1012330 for CVE-2016-7433",
"url": "https://bugzilla.suse.com/1012330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-7433"
},
{
"cve": "CVE-2016-7434",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-7434"
}
],
"notes": [
{
"category": "general",
"text": "The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-7434",
"url": "https://www.suse.com/security/cve/CVE-2016-7434"
},
{
"category": "external",
"summary": "SUSE Bug 1011398 for CVE-2016-7434",
"url": "https://bugzilla.suse.com/1011398"
},
{
"category": "external",
"summary": "SUSE Bug 1011421 for CVE-2016-7434",
"url": "https://bugzilla.suse.com/1011421"
},
{
"category": "external",
"summary": "SUSE Bug 1012330 for CVE-2016-7434",
"url": "https://bugzilla.suse.com/1012330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-7434"
},
{
"cve": "CVE-2016-9310",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9310"
}
],
"notes": [
{
"category": "general",
"text": "The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9310",
"url": "https://www.suse.com/security/cve/CVE-2016-9310"
},
{
"category": "external",
"summary": "SUSE Bug 1011377 for CVE-2016-9310",
"url": "https://bugzilla.suse.com/1011377"
},
{
"category": "external",
"summary": "SUSE Bug 1011421 for CVE-2016-9310",
"url": "https://bugzilla.suse.com/1011421"
},
{
"category": "external",
"summary": "SUSE Bug 1012330 for CVE-2016-9310",
"url": "https://bugzilla.suse.com/1012330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9310"
},
{
"cve": "CVE-2016-9311",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-9311"
}
],
"notes": [
{
"category": "general",
"text": "ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-9311",
"url": "https://www.suse.com/security/cve/CVE-2016-9311"
},
{
"category": "external",
"summary": "SUSE Bug 1011377 for CVE-2016-9311",
"url": "https://bugzilla.suse.com/1011377"
},
{
"category": "external",
"summary": "SUSE Bug 1011421 for CVE-2016-9311",
"url": "https://bugzilla.suse.com/1011421"
},
{
"category": "external",
"summary": "SUSE Bug 1012330 for CVE-2016-9311",
"url": "https://bugzilla.suse.com/1012330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-4.2.8p9-1.1.x86_64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.aarch64",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.ppc64le",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.s390x",
"openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-9311"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…