ntp - security update

Fixed packages 2

Vulnerabilities 16

• Unscored —
  CVE-2015-5146

  ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the co…

  ntp ntp Debian Ubuntu
  Aug 24, 2017
• Unscored —
  CVE-2015-5194

  The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denia…

  ntp ntp Debian Ubuntu
  Jul 21, 2017
• Unscored —
  CVE-2015-5195 Public exploit

  ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault…

  ntp ntp Debian Ubuntu
  Jul 21, 2017
• Unscored —
  CVE-2015-5219

  The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision valu…

  ntp ntp Debian Ubuntu
  Jul 21, 2017
• Unscored —
  CVE-2015-5300

  The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was great…

  ntp ntp Debian Ubuntu
  Jul 21, 2017
• Unscored —
  CVE-2015-7691

  The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause …

  ntp ntp Debian Ubuntu
  Aug 7, 2017
• Unscored —
  CVE-2015-7692

  The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause …

  ntp ntp Debian Ubuntu
  Aug 7, 2017
• Unscored —
  CVE-2015-7701

  Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote att…

  ntp ntp Debian Ubuntu
  Aug 7, 2017
• Unscored —
  CVE-2015-7702

  The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause …

  ntp ntp Debian Ubuntu
  Aug 7, 2017
• Unscored —
  CVE-2015-7703

  The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configu…

  ntp ntp Debian Ubuntu
  Jul 24, 2017
• Unscored —
  CVE-2015-7704 EPSS 11%

  The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service …

  ntp ntp Debian Ubuntu
  Aug 7, 2017
• Unscored —
  CVE-2015-7850

  ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of servic…

  ntp ntp Debian Ubuntu
  Aug 7, 2017
• Unscored —
  CVE-2015-7851

  Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used…

  ntp Debian
  Jan 28, 2020
• Unscored —
  CVE-2015-7852 EPSS 12%

  ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) …

  ntp ntp Debian Ubuntu
  Aug 7, 2017
• Unscored —
  CVE-2015-7855 Public exploit EPSS 31%

  The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause…

  ntp ntp Debian Ubuntu
  Aug 7, 2017
• Unscored —
  CVE-2015-7871 Public exploit EPSS 82%

  Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authe…

  ntp ntp Debian Ubuntu
  Aug 7, 2017