NULL pointer dereference in ntp - CVE-2016-9311
Published: April 30, 2018
Vulnerability identifier: #VU12306
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-9311
CWE-ID: CWE-476
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The weakness exists in ntpd due to NULL pointer dereference when the trap service is enabled. A remote attacker can submit a specially crafted packet and cause the service to crash.
The weakness exists in ntpd due to NULL pointer dereference when the trap service is enabled. A remote attacker can submit a specially crafted packet and cause the service to crash.
Affected software
ntp
Amazon Linux AMI
Arch Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux EUS Compute Node
Fedora
ntp
Virtualization Engine TS7700 3957-VEA
Virtualization Engine TS7700 3957-V06
Virtualization Engine TS7700 3957-V07
Virtualization Engine TS7700 3957-VEB
Virtualization Engine TS7700 3957-VEC
Amazon Linux AMI
Arch Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux EUS Compute Node
Fedora
ntp
Virtualization Engine TS7700 3957-VEA
Virtualization Engine TS7700 3957-V06
Virtualization Engine TS7700 3957-V07
Virtualization Engine TS7700 3957-VEB
Virtualization Engine TS7700 3957-VEC
How to mitigate CVE-2016-9311
Update to version 4.2.8p9.
ntp - addressed in versions 4.2.6p5-43.fc23, 4.2.6p5-43.fc24, 4.2.6p5-43.fc25
Virtualization Engine TS7700 3957-VEA - update to 8.21.0.178 VTD_EXEC.103 VTD_EXEC.279
Virtualization Engine TS7700 3957-V06 - update to 8.21.0.178 VTD_EXEC.103 VTD_EXEC.279
Virtualization Engine TS7700 3957-V07 - addressed in versions 8.33.3.14 VTD_EXEC.279, 8.40.2.12 VTD_EXEC.279, 8.41.101.10 VTD_EXEC.103 VTD_EXEC.279, 8.41.200.113 VTD_EXEC.279
Virtualization Engine TS7700 3957-VEB - addressed in versions 8.33.3.14 VTD_EXEC.279, 8.40.2.12 VTD_EXEC.279, 8.41.101.10 VTD_EXEC.103 VTD_EXEC.279, 8.41.200.113 VTD_EXEC.279
Virtualization Engine TS7700 3957-VEC - addressed in versions 8.40.2.12 VTD_EXEC.279, 8.41.101.10 VTD_EXEC.103, 8.41.200.113 VTD_EXEC.279
Virtualization Engine TS7700 3957-VEA - update to 8.21.0.178 VTD_EXEC.103 VTD_EXEC.279
Virtualization Engine TS7700 3957-V06 - update to 8.21.0.178 VTD_EXEC.103 VTD_EXEC.279
Virtualization Engine TS7700 3957-V07 - addressed in versions 8.33.3.14 VTD_EXEC.279, 8.40.2.12 VTD_EXEC.279, 8.41.101.10 VTD_EXEC.103 VTD_EXEC.279, 8.41.200.113 VTD_EXEC.279
Virtualization Engine TS7700 3957-VEB - addressed in versions 8.33.3.14 VTD_EXEC.279, 8.40.2.12 VTD_EXEC.279, 8.41.101.10 VTD_EXEC.103 VTD_EXEC.279, 8.41.200.113 VTD_EXEC.279
Virtualization Engine TS7700 3957-VEC - addressed in versions 8.40.2.12 VTD_EXEC.279, 8.41.101.10 VTD_EXEC.103, 8.41.200.113 VTD_EXEC.279