PT-2023-10106 · Unknown · Drybjed Ansible-Ntp
CVE-2014-125036
·
Publicado
2023-01-02
·
Atualizado
2024-05-17
CVSS v2.0
1.4
Baixa
| Vetor | AV:A/AC:H/Au:S/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
drybjed ansible-ntp (affected versions not specified)
Description
A problematic vulnerability has been found in drybjed ansible-ntp, affecting some unknown functionality of the file meta/main.yml. The manipulation leads to insufficient control of network message volume. The attack can only be done within the local network. The complexity of an attack is rather high, and the exploitation is known to be difficult.
Recommendations
To fix this issue, it is recommended to apply a patch, specifically the one identified as ed4ca2cf012677973c220cdba36b5c60bfa0260b. As a temporary workaround, consider restricting access to the meta/main.yml file until a patch is applied.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Drybjed Ansible-Ntp