PT-2016-5178

CVE-2016-2518

·

Published

2016-04-28

·

Updated

2024-06-15

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p9 NTP versions 4.3.x prior to 4.3.92
Description The issue allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value. This is related to the MATCH ASSOC function.
Recommendations For NTP versions prior to 4.2.8p9, update to version 4.2.8p9 or later. For NTP versions 4.3.x prior to 4.3.92, update to version 4.3.92 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2017-2335
CESA-2016_1141
DLA-559-1
DSA-3629-1
MGASA-2016-0174
OPENSUSE-SU-2016_1329-1
OPENSUSE-SU-2024:10181-1
RHSA-2016:1141
RHSA-2016_1141
RHSA-2016:1552
SUSE-SU-2016:1278-1
SUSE-SU-2016:1291-1
SUSE-SU-2016:1471-1
SUSE-SU-2016:1568-1
USN-3096-1
Found an issue in the description? Have something to add? Feel free to write us 👾