Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia: 2020-0281 Moderate: Remote NTP Denial Of Service Issue

mageia
Calendar Grey July 5, 2020
Dist Mageia Esm H88
Mageia 2021-0453 updates resolve a severe remote execution flaw in apache, addressing significant security vulnerabilities.
Updated ntp packages fix security vulnerability: ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumptio...

Summary

Updated ntp packages fix security vulnerability:
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file (CVE-2020-15025)

References

- https://bugs.mageia.org/show_bug.cgi?id=26851

- http://www.ntp.org/support/securitynotice/

- http://www.ntp.org/support/securitynotice/ntpbug3661/

- https://www.cve.org/CVERecord?id=CVE-2020-15025

Topics%20covered

Topics Covered

security advisory denial of service ntp memory consumption Mageia

Resolution

SRPMS

- 7/core/ntp-4.2.8p15-1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 05 Jul 2020
URL: https://advisories.mageia.org/MGASA-2020-0281.html
Type: security
CVE: CVE-2020-15025

Topics%20covered

Topics Covered

security advisory denial of service ntp memory consumption Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here