NVD

Id
36023  
Name
CVE-2014-9294  
Description
util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-19  
Modified Date
2017-01-02  
Seq
2014-9294  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184227 36023 CVE-2014-9294 http://advisories.mageia.org/MGASA-2014-0541.html  View
184228 36023 CVE-2014-9294 http://bk1.ntp.org/ntp-dev/util/ntp-keygen.c?PAGE=diffs&REV=4eae1b72298KRoBQmX-y8URCiRPH5g  View
184229 36023 CVE-2014-9294 http://bugs.ntp.org/show_bug.cgi?id=2666  View
184230 36023 CVE-2014-9294 HPSBPV03266  View
184231 36023 CVE-2014-9294 HPSBGN03277  View
184232 36023 CVE-2014-9294 SSRT101872  View
184233 36023 CVE-2014-9294 HPSBOV03505  View
184234 36023 CVE-2014-9294 RHSA-2014:2025  View
184235 36023 CVE-2014-9294 RHSA-2015:0104  View
184236 36023 CVE-2014-9294 62209  View
184237 36023 CVE-2014-9294 http://support.ntp.org/bin/view/Main/SecurityNotice  View
184238 36023 CVE-2014-9294 VU#852879  View
184239 36023 CVE-2014-9294 MDVSA-2015:003  View
184240 36023 CVE-2014-9294 http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
184241 36023 CVE-2014-9294 71762  View
184242 36023 CVE-2014-9294 https://bugzilla.redhat.com/show_bug.cgi?id=1176035  View
184243 36023 CVE-2014-9294 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04790232  View
184244 36023 CVE-2014-9294 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04916783  View
184245 36023 CVE-2014-9294 https://kc.mcafee.com/corporate/index?page=content&id=SB10103  View
184246 36023 CVE-2014-9294 20141222 Multiple Vulnerabilities in ntpd Affecting Cisco Products  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18476 JVNDB-2014-007351 NTP の ntp-keygen の util/ntp-keygen.c における暗号保護メカニズムを破られる脆弱性 NTP の ntp-keygen の util/ntp-keygen.c には、脆弱な RNG シードを使用しているため、暗号保護メカニズムを破られる脆弱性が存在します。 CVE-2014-9294 76587 CVE-2014-9294 36023 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007351.html 2014-11-03 2016-11-09 View