First published: Thu Apr 09 2015(Updated: )
A flaw was found in the way the ntp-keygen utility generated MD5 symmetric keys on big-endian systems. This could possibly allow an attacker to guess generated MD5 keys that could then be used to spoof an NTP client or server. If the lowest byte of the temp variable is outside of the printable characters range (between 0x20 and 0x7f), the ntp-keygen utility enters an infinite loop. However, if the temp variable is within the aforementioned range, the generated MD5 key will consist of 20 identical characters, meaning only 93 possible keys can be generated. Upstream bug: <a href="https://bugs.ntp.org/show_bug.cgi?id=2797">https://bugs.ntp.org/show_bug.cgi?id=2797</a> Upstream patch: <a href="http://bk1.ntp.org/ntp-stable/?PAGE=patch&REV=55199296N2gFqH1Hm5GOnhrk9Ypygg">http://bk1.ntp.org/ntp-stable/?PAGE=patch&REV=55199296N2gFqH1Hm5GOnhrk9Ypygg</a> CVE request: <a href="http://seclists.org/oss-sec/2015/q2/85">http://seclists.org/oss-sec/2015/q2/85</a>
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
NTP ntp | =4.2.8-p1 | |
NTP ntp | =4.2.8-p2 | |
NTP ntp | =4.2.8-p2-rc1 | |
NTP ntp | =4.3.0 | |
NTP ntp | =4.3.1 | |
NTP ntp | =4.3.2 | |
NTP ntp | =4.3.3 | |
NTP ntp | =4.3.4 | |
NTP ntp | =4.3.5 | |
NTP ntp | =4.3.6 | |
NTP ntp | =4.3.7 | |
NTP ntp | =4.3.8 | |
NTP ntp | =4.3.9 | |
NTP ntp | =4.3.10 | |
NTP ntp | =4.3.11 | |
Debian Debian Linux | =7.0 | |
Debian Debian Linux | =8.0 | |
Opensuse Suse Linux Enterprise Server | =11.0-sp3 | |
Opensuse Project Suse Linux Enterprise Desktop | =11.0-sp3 | |
Suse Suse Linux Enterprise Server Vmware | =11.0-sp3 | |
Fedoraproject Fedora | =21 | |
Redhat Enterprise Linux Desktop | =6.0 | |
Redhat Enterprise Linux For Ibm Z Systems | =6.0 | |
Redhat Enterprise Linux For Power Big Endian | =6.0 | |
Redhat Enterprise Linux For Scientific Computing | =6.0 | |
Redhat Enterprise Linux Server | =6.0 | |
Redhat Enterprise Linux Server From Rhui 6 | =6.0 | |
Redhat Enterprise Linux Workstation | =6.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.