QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2014-9750

Back to search

CVE-2014-9750

Published: Oct 4, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obtain sensitive information from process memory or cause a denial of service (daemon crash) via a packet containing an extension field with an invalid value for the length of its value field.

VendorProductVersions

n/a

n/a

affected
n/a

References

VU#852879
third-party-advisory
x_refsource_CERT-VN
72583
vdb-entry
x_refsource_BID
DSA-3388
vendor-advisory
x_refsource_DEBIAN
RHSA-2015:1459
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now