ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.
Project Subscriptions
| Vendors | Products |
|---|---|
|
Netapp
Subscribe
|
8300
Subscribe
8300 Firmware
Subscribe
8700
Subscribe
8700 Firmware
Subscribe
A400
Subscribe
A400 Firmware
Subscribe
Cloud Backup
Subscribe
H300e
Subscribe
H300e Firmware
Subscribe
H300s
Subscribe
H300s Firmware
Subscribe
H410c
Subscribe
H410c Firmware
Subscribe
H410s
Subscribe
H410s Firmware
Subscribe
H500e
Subscribe
H500e Firmware
Subscribe
H500s
Subscribe
H500s Firmware
Subscribe
H700e
Subscribe
H700e Firmware
Subscribe
H700s
Subscribe
H700s Firmware
Subscribe
Steelstore Cloud Integrated Storage
Subscribe
|
|
Ntp
Subscribe
|
Ntp
Subscribe
|
|
Opensuse
Subscribe
|
Leap
Subscribe
|
|
Oracle
Subscribe
|
Zfs Storage Appliance Kit
Subscribe
|
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2020-7153 | ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file. |
Ubuntu USN |
USN-5175-1 | NTP vulnerability |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-04T13:00:52.098Z
Reserved: 2020-06-24T00:00:00
Link: CVE-2020-15025
No data.
Status : Modified
Published: 2020-06-24T19:15:10.147
Modified: 2024-11-21T05:04:38.970
Link: CVE-2020-15025
OpenCVE Enrichment
No data.
EUVD
Ubuntu USN