The read_network_packet function in ntp_io.c in ntpd in NTP 4.x...
Vulnerability Description
The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a source IP address is an IPv6 loopback address, which makes it easier for remote attackers to spoof restricted packets, and read or write to the runtime state, by leveraging the ability to reach the ntpd machine's network interface with a packet from the ::1 address.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-9751
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.kb.cert.org/vuls/id/852879
- http://support.ntp.org/bin/view/Main/SecurityNotice#December_2014_NTP_Security_Vulne
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://bugs.ntp.org/show_bug.cgi?id=2672
- http://www.debian.org/security/2015/dsa-3388
- http://www.securityfocus.com/bid/72584
- http://rhn.redhat.com/errata/RHSA-2015-1459.html
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03886en_us
- https://bugzilla.redhat.com/show_bug.cgi?id=1184572
More from ntp
View All →Affected Vendor
Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.