CVE List

Id CVE No. Status Description Phase Votes Comments Actions
103275  CVE-2017-6455  Candidate  NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPI_DLLS environment variable.  Assigned (20170303)  None (candidate not yet proposed)    View
103274  CVE-2017-6454  Candidate  ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.  Assigned (20170303)  None (candidate not yet proposed)    View
103273  CVE-2017-6453  Candidate  ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.  Assigned (20170303)  None (candidate not yet proposed)    View
103272  CVE-2017-6452  Candidate  Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line.  Assigned (20170303)  None (candidate not yet proposed)    View
103271  CVE-2017-6451  Candidate  The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.  Assigned (20170303)  None (candidate not yet proposed)    View

Page 289 of 20943, showing 5 records out of 104715 total, starting on record 1441, ending on 1445

Actions