NVD

Id
21107  
Name
CVE-2016-6301  
Description
The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-12-09  
Modified Date
2016-12-14  
Seq
2016-6301  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
114897 21107 CVE-2016-6301 [oss-security] 20160803 CVE-2016-6301: busybox: NTP server denial of service flaw  View
114898 21107 CVE-2016-6301 92277  View
114899 21107 CVE-2016-6301 https://bugzilla.redhat.com/show_bug.cgi?id=1363710  View
114900 21107 CVE-2016-6301 https://git.busybox.net/busybox/commit/?id=150dc7a2b483b8338a3e185c478b4b23ee884e71  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5454 JVNDB-2016-006227 BusyBox の networking/ntpd.c の recv_and_process_client_pkt 関数におけるサービス運用妨害 (DoS) の脆弱性 BusyBox の networking/ntpd.c の recv_and_process_client_pkt 関数には、サービス運用妨害 (CPU および帯域幅の消費) 状態にされる脆弱性が存在します。 CVE-2016-6301 92808 CVE-2016-6301 21107 7.8 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006227.html 2016-08-01 2016-12-15 View