QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2016-2518

Back to search

CVE-2016-2518

Published: Jan 30, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.

VendorProductVersions

n/a

n/a

affected
n/a

References

USN-3096-1
vendor-advisory
x_refsource_UBUNTU
DSA-3629
vendor-advisory
x_refsource_DEBIAN
RHSA-2016:1141
vendor-advisory
x_refsource_REDHAT
SUSE-SU-2016:1912
vendor-advisory
x_refsource_SUSE
VU#718152
third-party-advisory
x_refsource_CERT-VN
RHSA-2016:1552
vendor-advisory
x_refsource_REDHAT
1035705
vdb-entry
x_refsource_SECTRACK
FreeBSD-SA-16:16
vendor-advisory
x_refsource_FREEBSD
SUSE-SU-2016:2094
vendor-advisory
x_refsource_SUSE
88226
vdb-entry
x_refsource_BID
openSUSE-SU-2016:1423
vendor-advisory
x_refsource_SUSE
GLSA-201607-15
vendor-advisory
x_refsource_GENTOO
openSUSE-SU-2016:1329
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:1471
vendor-advisory
x_refsource_SUSE
FEDORA-2016-5b2eb0bf9c
vendor-advisory
x_refsource_FEDORA
SUSE-SU-2016:1291
vendor-advisory
x_refsource_SUSE
DSA-3629
vendor-advisory
x_refsource_DEBIAN
SUSE-SU-2016:1568
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:1278
vendor-advisory
x_refsource_SUSE
FEDORA-2016-ed8c6c0426
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now
CVE-2016-2518 - Security Vulnerability | QwikSec