Wind River Support Network

HomeDefectsLIN7-4994
Fixed

LIN7-4994 : Security Advisory - ntp - CVE-2015-7702

Created: Oct 22, 2015    Updated: Sep 8, 2018
Resolved Date: Dec 10, 2015
Previous ID: LIN4-33097
Found In Version: 7.0.0.9
Fix Version: 7.0.0.12
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Userspace

Description

It was found that the fix for CVE-2014-9750 was incomplete: three issues were found in the value length checks in ntp_crypto.c, where a packet with particular autokey operations that contained malicious data was not always being completely validated. Receipt of these packets can cause ntpd to crash.

Upstream patch:

https://github.com/ntp-project/ntp/commit/c4cd4aaf418f57f7225708a93bf48afb2bc9c1da

Other Downloads


CVEs


Live chat
Online