PT-2023-10106 · Unknown · Drybjed Ansible-Ntp

CVE-2014-125036

·

Publicado

2023-01-02

·

Atualizado

2024-05-17

CVSS v2.0

1.4

Baixa

VetorAV:A/AC:H/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions drybjed ansible-ntp (affected versions not specified)
Description A problematic vulnerability has been found in drybjed ansible-ntp, affecting some unknown functionality of the file meta/main.yml. The manipulation leads to insufficient control of network message volume. The attack can only be done within the local network. The complexity of an attack is rather high, and the exploitation is known to be difficult.
Recommendations To fix this issue, it is recommended to apply a patch, specifically the one identified as ed4ca2cf012677973c220cdba36b5c60bfa0260b. As a temporary workaround, consider restricting access to the meta/main.yml file until a patch is applied.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2014-125036

Produtos afetados

Drybjed Ansible-Ntp