CVE

Id
77052  
CVE No.
CVE-2014-9751  
Status
Candidate  
Description
The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a source IP address is an IPv6 loopback address, which makes it easier for remote attackers to spoof restricted packets, and read or write to the runtime state, by leveraging the ability to reach the ntpd machine"s network interface with a packet from the ::1 address.  
Phase
Assigned (20151004)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
706852 77052 CVE-2014-9751 CONFIRM:http://bugs.ntp.org/show_bug.cgi?id=2672  View
706853 77052 CVE-2014-9751 CONFIRM:http://support.ntp.org/bin/view/Main/SecurityNotice#December_2014_NTP_Security_Vulne  View
706854 77052 CVE-2014-9751 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1184572  View
706855 77052 CVE-2014-9751 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
706856 77052 CVE-2014-9751 CERT-VN:VU#852879  View
706857 77052 CVE-2014-9751 URL:http://www.kb.cert.org/vuls/id/852879  View
706858 77052 CVE-2014-9751 BID:72584  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19279 JVNDB-2014-008157 MantisBT の config_api.php の config_is_private 関数における重要なマスターソルトの設定情報を取得される脆弱性 MantisBT の config_api.php の config_is_private 関数には、不完全なブラックリストにより、重要なマスターソルト (master salt) の設定情報を取得される脆弱性が存在します。 CVE-2014-9759 77052 5 5.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008157.html  View