Configuration error in ntp - CVE-2017-6463

Vulnerability identifier: #VU12125

CSH Severity: Medium

CVSS v4: 8.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H]

CVE-ID: CVE-2017-6463

CWE-ID: CWE-16

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote authenticated attacker to cause DoS condition on the target system.

The weakness exists in the unpeer option due to the NTP server's parsing of configuration directives. A remote attacker can submit a specially crafted message and cause the service to crash.

ntp
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
Junos OS
Slackware Linux
Fedora
Junos OS Evolved
ntp

Update to versions 4.2.8p10 or 4.3.94.

Junos OS - addressed in versions 12.3X48-D95, 12.3R12-S15, 14.1X53-D53, 15.1x49-D190, 15.1R7-S6, 16.1R7-S6, 16.2R3, 17.1R2-S11, 17.1R3-S1, 17.2R1-S9, 17.2R2-S8, 17.2R3-S3, 17.3R2-S5, 17.3R3-S6, 17.4R2-S7, 17.4R3, 18.1R3-S8, 18.2R2-S7, 18.2R3-S1, 18.3R1-S5, 18.3R2-S2, 18.3R3, 18.4R1-S4, 18.4R2-S1, 18.4R3, 19.1R1-S3, 19.1R2, 19.2R1-S1, 19.2R2, 19.3R1
ntp - addressed in versions 4.2.6p5-44.fc24, 4.2.6p5-44.fc25, 4.2.8p10-1.fc26
Junos OS Evolved - update to 20.1R1-EVO

• http://support.ntp.org/bin/view/Main/NtpBug3387

• Amazon Linux AMI update for ntp
• Red Hat update for ntp
• Red Hat update for ntp
• Slackware Linux update for ntp
• Multiple NTP vulnerabilities in Junos OS and Junos OS Evolved
• Fedora 24 update for ntp
• Fedora 25 update for ntp
• Fedora 26 update for ntp