Skip to content
OpenAdvisories
Unscored RHSA-2015:1459 7 CVEs

Red Hat Security Advisory: ntp security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client ntp 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::client ntp-debuginfo 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::client ntp-doc 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::client ntp-perl 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::client ntpdate 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode ntp 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode ntp-debuginfo 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode ntp-doc 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode ntp-perl 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode ntpdate 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::server ntp 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::server ntp-debuginfo 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::server ntp-doc 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::server ntp-perl 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::server ntpdate 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation ntp 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation ntp-debuginfo 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation ntp-doc 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation ntp-perl 0:4.2.6p5-5.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation ntpdate 0:4.2.6p5-5.el6

Vulnerabilities 7

  • Unscored —
    CVE-2014-9297 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9750, CVE-2014-9751. Reason: this ID was intended for one issue,…

    ntp Ubuntu
  • Unscored —
    CVE-2014-9298 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9750, CVE-2014-9751. Reason: this ID was intended for one issue,…

    ntp Ubuntu
  • Unscored —
    CVE-2014-9750

    ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obta…

    ntp Debian
  • Unscored —
    CVE-2014-9751

    The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly dete…

    ntp Debian
  • Unscored —
    CVE-2015-1798

    The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct M…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-1799

    The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs sta…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-3405

    ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy…

    ntp ntp Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=995134
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1045376
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1117704
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1122015
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1165141
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1166596
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1171630
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1184572
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1184573
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1190619
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1193849
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1193850
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1199430
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1199435
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1210324
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1459.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-9297
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-9297
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-9297
  • article
    http://support.ntp.org/bin/view/Main/SecurityNotice#vallen_is_not_validated_in_sever
  • report
    https://access.redhat.com/security/cve/CVE-2014-9298
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-9298
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-9298
  • article
    http://support.ntp.org/bin/view/Main/SecurityNotice#1_can_be_spoofed_on_some_OSes_so
  • report
    https://access.redhat.com/security/cve/CVE-2014-9750
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-9750
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-9750
  • report
    https://access.redhat.com/security/cve/CVE-2014-9751
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-9751
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-9751
  • report
    https://access.redhat.com/security/cve/CVE-2015-1798
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-1798
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-1798
  • report
    https://access.redhat.com/security/cve/CVE-2015-1799
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-1799
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-1799
  • report
    https://access.redhat.com/security/cve/CVE-2015-3405
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3405