Wind River Support Network

HomeDefectsLIN7-4982
Fixed

LIN7-4982 : Security Advisory - ntp - CVE-2015-7853

Created: Oct 21, 2015    Updated: Sep 8, 2018
Resolved Date: Oct 27, 2015
Previous ID: LIN4-33058
Found In Version: 7.0.0.9
Fix Version: 7.0.0.11
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Userspace

Description

A potential buffer overflow vulnerability exists in the refclock of ntpd. An invalid length provided by a hardware reference clock could cause a buffer overflow potentially resulting in memory being modified. A malicious reflock could provide a negative length to trigger this vulnerability.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7853

Other Downloads


CVEs


Live chat
Online