CVE:CVE-2015-5194
CNNVD:CNNVD-201509-468
NTP是nwtime开源的一个网络时间协议。
NTP 4.2.7p42之前版本存在输入验证错误漏洞。远程攻击者利用该漏洞通过特制的logconfig命令导致系统拒绝服务。
solution:Upgrade fedoraproject fedora to a higher version than 21,22,and avoid the version 21,22; Upgrade suse linux_enterprise_debuginfo to a higher version than 11:sp2,11:sp3,and avoid the version 11:sp2,11:sp3; Upgrade suse linux_enterprise_server to a higher version than 10:sp4,11:sp2,11:sp3,and avoid the version 10:sp4,11:sp2,11:sp3; Upgrade suse manager to a higher version than 2.1,and avoid the version 2.1; Upgrade suse manager_proxy to a higher version than 2.1,and avoid the version 2.1; Upgrade suse openstack_cloud to a higher version than 5,and avoid the version 5; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,15.10,and avoid the version 12.04,14.04,15.04,15.10; Upgrade ntp ntp to a higher version than *:p40,and avoid the version *:p40