Buffer overflow in IBM AIX - CVE-2017-6462

Vulnerability identifier: #VU7389

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-6462

CWE-ID: CWE-120

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to cause DoS condition.

The weakness exists due to buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP. A remote attacker can send specially crafted packets, trigger memory corruption and cause the application to crash.

Successful exploitation of the vulnerability results in denial of service.

IBM AIX
Amazon Linux AMI
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
Junos OS
Slackware Linux
Fedora
Junos OS Evolved
ntp

Install update from vendor's website.

Junos OS - addressed in versions 12.3X48-D95, 12.3R12-S15, 14.1X53-D53, 15.1x49-D190, 15.1R7-S6, 16.1R7-S6, 16.2R3, 17.1R2-S11, 17.1R3-S1, 17.2R1-S9, 17.2R2-S8, 17.2R3-S3, 17.3R2-S5, 17.3R3-S6, 17.4R2-S7, 17.4R3, 18.1R3-S8, 18.2R2-S7, 18.2R3-S1, 18.3R1-S5, 18.3R2-S2, 18.3R3, 18.4R1-S4, 18.4R2-S1, 18.4R3, 19.1R1-S3, 19.1R2, 19.2R1-S1, 19.2R2, 19.3R1
ntp - addressed in versions 4.2.6p5-44.fc24, 4.2.6p5-44.fc25, 4.2.8p10-1.fc26
Junos OS Evolved - update to 20.1R1-EVO

• http://aix.software.ibm.com/aix/efixes/security/ntp_advisory9.asc

• Multiple vulnerabilities in IBM AIX
• Amazon Linux AMI update for ntp
• Red Hat update for ntp
• Red Hat update for ntp
• Slackware Linux update for ntp
• Multiple NTP vulnerabilities in Junos OS and Junos OS Evolved
• Fedora 24 update for ntp
• Fedora 25 update for ntp
• Fedora 26 update for ntp