CVE-2013-5211
02.01.2014, 14:59
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| opensuse | opensuse | 11.4 |
| ntp | ntp | 𝑥 < 4.2.7 |
| ntp | ntp | 4.2.7 |
| ntp | ntp | 4.2.7:p0 |
| ntp | ntp | 4.2.7:p1 |
| ntp | ntp | 4.2.7:p10 |
| ntp | ntp | 4.2.7:p11 |
| ntp | ntp | 4.2.7:p12 |
| ntp | ntp | 4.2.7:p13 |
| ntp | ntp | 4.2.7:p14 |
| ntp | ntp | 4.2.7:p15 |
| ntp | ntp | 4.2.7:p16 |
| ntp | ntp | 4.2.7:p17 |
| ntp | ntp | 4.2.7:p18 |
| ntp | ntp | 4.2.7:p19 |
| ntp | ntp | 4.2.7:p2 |
| ntp | ntp | 4.2.7:p20 |
| ntp | ntp | 4.2.7:p21 |
| ntp | ntp | 4.2.7:p22 |
| ntp | ntp | 4.2.7:p23 |
| ntp | ntp | 4.2.7:p24 |
| ntp | ntp | 4.2.7:p25 |
| ntp | ntp | 4.2.7:p3 |
| ntp | ntp | 4.2.7:p4 |
| ntp | ntp | 4.2.7:p5 |
| ntp | ntp | 4.2.7:p6 |
| ntp | ntp | 4.2.7:p7 |
| ntp | ntp | 4.2.7:p8 |
| ntp | ntp | 4.2.7:p9 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Amazon Linux Releases
Amazon Package | |||||
|---|---|---|---|---|---|
| ntp |
| ||||
| ntp-debuginfo |
| ||||
| ntp-doc |
| ||||
| ntp-perl |
| ||||
| ntpdate |
| ||||
| sntp |
|
Common Weakness Enumeration
References