CVE-2014-9296 in Communications Policy Management

Zusammenfassung (Englisch)

The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote attackers to trigger an unintended association change via crafted packets.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservieren

05.12.2014

Veröffentlichung

19.12.2014

Status

Bestätigt

Einträge

VulDB provides additional information and datapoints for this CVE:

ID	Schwachstelle	CWE	Aus	Mas	CVE
92853	Oracle Communications Policy Management NTP Denial of Service	17	Nicht definiert	Offizieller Fix	CVE-2014-9296
68455	NTP Daemon ntp_proto.c receive Denial of Service	17	Unbewiesen	Offizieller Fix	CVE-2014-9296

Quellen

• MITRE
• NVD
• CVE Details