CVE-2014-9296 in Oracle Communications Policy Management

요약 (영어)

The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote attackers to trigger an unintended association change via crafted packets.

예약하다

2014. 12. 05.

공개

2014. 12. 19.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
92853	Oracle Communications Policy Management NTP 서비스 거부	17	정의되지 않음	공식 수정	CVE-2014-9296
68455	NTP Daemon ntp_proto.c receive 서비스 거부	17	입증되지 않음	공식 수정	CVE-2014-9296