CVE-2016-2518
30.01.2017, 21:59
The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ntp | ntp | 𝑥 < 4.2.8 |
| ntp | ntp | 4.3.0 ≤ 𝑥 < 4.3.92 |
| ntp | ntp | 4.2.8 |
| ntp | ntp | 4.2.8:p1 |
| ntp | ntp | 4.2.8:p1-beta1 |
| ntp | ntp | 4.2.8:p1-beta2 |
| ntp | ntp | 4.2.8:p1-beta3 |
| ntp | ntp | 4.2.8:p1-beta4 |
| ntp | ntp | 4.2.8:p1-beta5 |
| ntp | ntp | 4.2.8:p1-rc1 |
| ntp | ntp | 4.2.8:p1-rc2 |
| ntp | ntp | 4.2.8:p2 |
| ntp | ntp | 4.2.8:p2-rc1 |
| ntp | ntp | 4.2.8:p2-rc2 |
| ntp | ntp | 4.2.8:p2-rc3 |
| ntp | ntp | 4.2.8:p3 |
| ntp | ntp | 4.2.8:p3-rc1 |
| ntp | ntp | 4.2.8:p3-rc2 |
| ntp | ntp | 4.2.8:p3-rc3 |
| ntp | ntp | 4.2.8:p4 |
| ntp | ntp | 4.2.8:p5 |
| ntp | ntp | 4.2.8:p6 |
| ntp | ntp | 4.2.8:p7 |
| ntp | ntp | 4.2.8:p8 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
| netapp | clustered_data_ontap | - |
| netapp | data_ontap | - |
| netapp | oncommand_balance | - |
| netapp | oncommand_performance_manager | - |
| netapp | oncommand_unified_manager_for_clustered_data_ontap | - |
| oracle | communications_user_data_repository | 10.0.0 |
| oracle | communications_user_data_repository | 10.0.1 |
| oracle | communications_user_data_repository | 12.0.0 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 6.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_server_aus | 7.2 |
| redhat | enterprise_linux_server_aus | 7.4 |
| redhat | enterprise_linux_server_aus | 7.6 |
| redhat | enterprise_linux_server_eus | 7.2 |
| redhat | enterprise_linux_server_eus | 7.3 |
| redhat | enterprise_linux_server_eus | 7.4 |
| redhat | enterprise_linux_server_eus | 7.5 |
| redhat | enterprise_linux_server_eus | 7.6 |
| redhat | enterprise_linux_server_eus | 7.7 |
| redhat | enterprise_linux_server_tus | 7.2 |
| redhat | enterprise_linux_server_tus | 7.3 |
| redhat | enterprise_linux_server_tus | 7.6 |
| redhat | enterprise_linux_server_tus | 7.7 |
| redhat | enterprise_linux_workstation | 6.0 |
| freebsd | freebsd | 9.3 |
| freebsd | freebsd | 9.3:p1 |
| freebsd | freebsd | 9.3:p10 |
| freebsd | freebsd | 9.3:p12 |
| freebsd | freebsd | 9.3:p13 |
| freebsd | freebsd | 9.3:p16 |
| freebsd | freebsd | 9.3:p19 |
| freebsd | freebsd | 9.3:p2 |
| freebsd | freebsd | 9.3:p20 |
| freebsd | freebsd | 9.3:p21 |
| freebsd | freebsd | 9.3:p22 |
| freebsd | freebsd | 9.3:p23 |
| freebsd | freebsd | 9.3:p24 |
| freebsd | freebsd | 9.3:p25 |
| freebsd | freebsd | 9.3:p28 |
| freebsd | freebsd | 9.3:p3 |
| freebsd | freebsd | 9.3:p30 |
| freebsd | freebsd | 9.3:p31 |
| freebsd | freebsd | 9.3:p32 |
| freebsd | freebsd | 9.3:p33 |
| freebsd | freebsd | 9.3:p34 |
| freebsd | freebsd | 9.3:p35 |
| freebsd | freebsd | 9.3:p36 |
| freebsd | freebsd | 9.3:p38 |
| freebsd | freebsd | 9.3:p39 |
| freebsd | freebsd | 9.3:p5 |
| freebsd | freebsd | 9.3:p6 |
| freebsd | freebsd | 9.3:p7 |
| freebsd | freebsd | 9.3:p8 |
| freebsd | freebsd | 9.3:p9 |
| freebsd | freebsd | 10.1 |
| freebsd | freebsd | 10.1:p1 |
| freebsd | freebsd | 10.1:p10 |
| freebsd | freebsd | 10.1:p12 |
| freebsd | freebsd | 10.1:p15 |
| freebsd | freebsd | 10.1:p16 |
| freebsd | freebsd | 10.1:p17 |
| freebsd | freebsd | 10.1:p18 |
| freebsd | freebsd | 10.1:p19 |
| freebsd | freebsd | 10.1:p2 |
| freebsd | freebsd | 10.1:p22 |
| freebsd | freebsd | 10.1:p24 |
| freebsd | freebsd | 10.1:p25 |
| freebsd | freebsd | 10.1:p26 |
| freebsd | freebsd | 10.1:p27 |
| freebsd | freebsd | 10.1:p28 |
| freebsd | freebsd | 10.1:p29 |
| freebsd | freebsd | 10.1:p3 |
| freebsd | freebsd | 10.1:p30 |
| freebsd | freebsd | 10.1:p31 |
| freebsd | freebsd | 10.1:p4 |
| freebsd | freebsd | 10.1:p5 |
| freebsd | freebsd | 10.1:p6 |
| freebsd | freebsd | 10.1:p7 |
| freebsd | freebsd | 10.1:p8 |
| freebsd | freebsd | 10.1:p9 |
| freebsd | freebsd | 10.2 |
| freebsd | freebsd | 10.2:p1 |
| freebsd | freebsd | 10.2:p10 |
| freebsd | freebsd | 10.2:p11 |
| freebsd | freebsd | 10.2:p12 |
| freebsd | freebsd | 10.2:p13 |
| freebsd | freebsd | 10.2:p14 |
| freebsd | freebsd | 10.2:p2 |
| freebsd | freebsd | 10.2:p5 |
| freebsd | freebsd | 10.2:p7 |
| freebsd | freebsd | 10.2:p8 |
| freebsd | freebsd | 10.2:p9 |
| freebsd | freebsd | 10.3 |
| siemens | simatic_net_cp_443-1_opc_ua_firmware | * |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References