CVE-2014-9751

描述

The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a source IP address is an IPv6 loopback address, which makes it easier for remote attackers to spoof restricted packets, and read or write to the runtime state, by leveraging the ability to reach the ntpd machine's network interface with a packet from the ::1 address.

如何修補 CVE-2014-9751

要修補 CVE-2014-9751,請將受影響套件升級到下列已修補版本。

• Debian/ntp—升級至 1:4.2.6.p5+dfsg-4 或更新版本

CVE-2014-9751 正在被利用嗎?

低 — EPSS 為 4.5%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 1:4.2.6.p5+dfsg-4

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2014-9751