Network Time Protocol Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-9298US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9750, CVE-2014-9751. Reason: this ID was intended for one issue, but was associated with two issues. Note… | ||||
| CVE-2014-9297US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9750, CVE-2014-9751. Reason: this ID was intended for one issue, but was associated with two issues. Note… | ||||
| CVE-2014-9296US | medium5.0 | — | ||
The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote attackers to trigger a… | ||||
| CVE-2014-9295US | high7.5 | Exploit | ||
Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function whe… | ||||
| CVE-2014-9294US | high7.5 | — | ||
util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-f… | ||||
| CVE-2014-9293US | high7.5 | — | ||
The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat crypto… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-14-353-01C JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-353-01C - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (48)
- MitigationArbiter Systems Clock products using the network card
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationArbiter Systems Clock products using the network card
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationArbiter Systems Clock products using the network card
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationArbiter Systems Clock products using the network card
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationArbiter Systems Clock products using the network card
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationArbiter Systems Clock products using the network card
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationInnomoninate mGuard Firmware
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationInnomoninate mGuard Firmware
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationInnomoninate mGuard Firmware
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationInnomoninate mGuard Firmware
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationInnomoninate mGuard Firmware
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationInnomoninate mGuard Firmware
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationMeinberg LANTIME Firmware
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationMeinberg LANTIME Firmware
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationMeinberg LANTIME Firmware
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationMeinberg LANTIME Firmware
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationMeinberg LANTIME Firmware
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationMeinberg LANTIME Firmware
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationMeinberg NTP V4.x
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationMeinberg NTP V4.x
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationMeinberg NTP V4.x
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationMeinberg NTP V4.x
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationMeinberg NTP V4.x
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationMeinberg NTP V4.x
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationSiemens ROX 1
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationSiemens ROX 1
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationSiemens ROX 1
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationSiemens ROX 1
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationSiemens ROX 1
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationSiemens ROX 1
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationSiemens ROX 2
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationSiemens ROX 2
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationSiemens ROX 2
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationSiemens ROX 2
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationSiemens ROX 2
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationSiemens ROX 2
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationWind River System VxWorks
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationWind River System VxWorks
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationWind River System VxWorks
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationWind River System VxWorks
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationWind River System VxWorks
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationWind River System VxWorks
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationWind River System WR Linux
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationWind River System WR Linux
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationWind River System WR Linux
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationWind River System WR Linux
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationWind River System WR Linux
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
- MitigationWind River System WR Linux
Additional mitigation guidance and recommended practices are publicly available in the following two publications: Best Practices for Improved Robustness of Time and Frequency Source in Fixed Locations, that is available for download from the ICS-CERT web site (https://ics-cert.us-cert.gov/Other-Reports ).
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan