CVE-2016-7431 in Oracle M3000info

Summary

NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.

Reservation

09/09/2016

Disclosure

01/13/2017

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
108239	Oracle M3000/M4000/M5000/M8000/M9000 XCP Firmware input validation	20	Not defined	Official fix	CVE-2016-7431
108238	Oracle M10-1/M10-4/M10-4S/M12-1/M12-2/M12-2S XCP Firmware input validation	20	Not defined	Official fix	CVE-2016-7431
95321	ntpd Origin Timestamp Protection input validation	20	Not defined	Official fix	CVE-2016-7431

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!