Synopsis

Moderate: ntp security update

Type/Severity

Security Advisory: Moderate

Topic

An update for ntp is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Network Time Protocol (NTP) is used to synchronize a computer's time with another referenced time source. These packages include the ntpd service which continuously adjusts system time and utilities used to query and configure the ntpd service.

Security Fix(es):

• Two vulnerabilities were discovered in the NTP server's parsing of configuration directives. A remote, authenticated attacker could cause ntpd to crash by sending a crafted message. (CVE-2017-6463, CVE-2017-6464)
  
• A vulnerability was found in NTP, in the parsing of packets from the /dev/datum device. A malicious device could send crafted messages, causing ntpd to crash. (CVE-2017-6462)
  

Red Hat would like to thank the NTP project for reporting these issues. Upstream acknowledges Cure53 as the original reporter of these issues.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, the ntpd daemon will restart automatically.

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64

Fixes

• BZ - 1433987 - CVE-2017-6464 ntp: Denial of Service via Malformed Config
• BZ - 1433995 - CVE-2017-6462 ntp: Buffer Overflow in DPTS Clock
• BZ - 1434002 - CVE-2017-6463 ntp: Authenticated DoS via Malicious Config Option

CVEs

• CVE-2017-6462
• CVE-2017-6463
• CVE-2017-6464

References

• https://access.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 6

SRPM
ntp-4.2.6p5-12.el6_9.1.src.rpm	SHA-256: cf759d6e6bacd8f6ab3e465f174b5a37e02c5eff0d921ce177375b5ce2b795ee
x86_64
ntp-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 4bdbd6e0e12d0477b1ecca01d6a8367fa86a6e07647ea6d8e856f6294d3b1fda
ntp-debuginfo-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 472b4bbc2c9335f8102918044754316543b8185ae408b48bb747820d80e376ef
ntp-debuginfo-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 472b4bbc2c9335f8102918044754316543b8185ae408b48bb747820d80e376ef
ntp-doc-4.2.6p5-12.el6_9.1.noarch.rpm	SHA-256: b3a814e4871c8b1df98f9d718b0ab3b6fb76dc2c3cacfb93db1b108f771eea3b
ntp-perl-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 685e8dc359daf263e3035553d70d00fb1194b0a08c54c301ec28e24591b88823
ntpdate-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 58bad863a1e38e43d9e7b553da968930d62f17d7ed63af5ebc9b642c5a9b5bdf
i386
ntp-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: de7c8a5173fb2de76623fa3c5f3d2c220fa86406af865664547acfd74285169e
ntp-debuginfo-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: d050ad415a93f45c318949c6e49e86c116ae0be9b72fce95a166dd37e01b7628
ntp-debuginfo-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: d050ad415a93f45c318949c6e49e86c116ae0be9b72fce95a166dd37e01b7628
ntp-doc-4.2.6p5-12.el6_9.1.noarch.rpm	SHA-256: b3a814e4871c8b1df98f9d718b0ab3b6fb76dc2c3cacfb93db1b108f771eea3b
ntp-perl-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: c39c8a0b5cfbe80bbb35721038fb5bf12ecebcd32cbf219a7db0337c64cc3332
ntpdate-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: c8c226f30bbdada88fdf26557f3c8f8a26096d23c8e10f80d8eaf89f51c0ff7a

Red Hat Enterprise Linux Workstation 6

SRPM
ntp-4.2.6p5-12.el6_9.1.src.rpm	SHA-256: cf759d6e6bacd8f6ab3e465f174b5a37e02c5eff0d921ce177375b5ce2b795ee
x86_64
ntp-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 4bdbd6e0e12d0477b1ecca01d6a8367fa86a6e07647ea6d8e856f6294d3b1fda
ntp-debuginfo-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 472b4bbc2c9335f8102918044754316543b8185ae408b48bb747820d80e376ef
ntp-debuginfo-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 472b4bbc2c9335f8102918044754316543b8185ae408b48bb747820d80e376ef
ntp-doc-4.2.6p5-12.el6_9.1.noarch.rpm	SHA-256: b3a814e4871c8b1df98f9d718b0ab3b6fb76dc2c3cacfb93db1b108f771eea3b
ntp-perl-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 685e8dc359daf263e3035553d70d00fb1194b0a08c54c301ec28e24591b88823
ntpdate-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 58bad863a1e38e43d9e7b553da968930d62f17d7ed63af5ebc9b642c5a9b5bdf
i386
ntp-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: de7c8a5173fb2de76623fa3c5f3d2c220fa86406af865664547acfd74285169e
ntp-debuginfo-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: d050ad415a93f45c318949c6e49e86c116ae0be9b72fce95a166dd37e01b7628
ntp-debuginfo-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: d050ad415a93f45c318949c6e49e86c116ae0be9b72fce95a166dd37e01b7628
ntp-doc-4.2.6p5-12.el6_9.1.noarch.rpm	SHA-256: b3a814e4871c8b1df98f9d718b0ab3b6fb76dc2c3cacfb93db1b108f771eea3b
ntp-perl-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: c39c8a0b5cfbe80bbb35721038fb5bf12ecebcd32cbf219a7db0337c64cc3332
ntpdate-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: c8c226f30bbdada88fdf26557f3c8f8a26096d23c8e10f80d8eaf89f51c0ff7a

Red Hat Enterprise Linux Desktop 6

SRPM
ntp-4.2.6p5-12.el6_9.1.src.rpm	SHA-256: cf759d6e6bacd8f6ab3e465f174b5a37e02c5eff0d921ce177375b5ce2b795ee
x86_64
ntp-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 4bdbd6e0e12d0477b1ecca01d6a8367fa86a6e07647ea6d8e856f6294d3b1fda
ntp-debuginfo-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 472b4bbc2c9335f8102918044754316543b8185ae408b48bb747820d80e376ef
ntp-debuginfo-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 472b4bbc2c9335f8102918044754316543b8185ae408b48bb747820d80e376ef
ntp-doc-4.2.6p5-12.el6_9.1.noarch.rpm	SHA-256: b3a814e4871c8b1df98f9d718b0ab3b6fb76dc2c3cacfb93db1b108f771eea3b
ntp-perl-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 685e8dc359daf263e3035553d70d00fb1194b0a08c54c301ec28e24591b88823
ntpdate-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 58bad863a1e38e43d9e7b553da968930d62f17d7ed63af5ebc9b642c5a9b5bdf
i386
ntp-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: de7c8a5173fb2de76623fa3c5f3d2c220fa86406af865664547acfd74285169e
ntp-debuginfo-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: d050ad415a93f45c318949c6e49e86c116ae0be9b72fce95a166dd37e01b7628
ntp-debuginfo-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: d050ad415a93f45c318949c6e49e86c116ae0be9b72fce95a166dd37e01b7628
ntp-doc-4.2.6p5-12.el6_9.1.noarch.rpm	SHA-256: b3a814e4871c8b1df98f9d718b0ab3b6fb76dc2c3cacfb93db1b108f771eea3b
ntp-perl-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: c39c8a0b5cfbe80bbb35721038fb5bf12ecebcd32cbf219a7db0337c64cc3332
ntpdate-4.2.6p5-12.el6_9.1.i686.rpm	SHA-256: c8c226f30bbdada88fdf26557f3c8f8a26096d23c8e10f80d8eaf89f51c0ff7a

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
ntp-4.2.6p5-12.el6_9.1.src.rpm	SHA-256: cf759d6e6bacd8f6ab3e465f174b5a37e02c5eff0d921ce177375b5ce2b795ee
s390x
ntp-4.2.6p5-12.el6_9.1.s390x.rpm	SHA-256: 5f1fd7e9ee46aa4f0ecd10a712626c8ec1350137989ea01bda7a9fae5397ba99
ntp-debuginfo-4.2.6p5-12.el6_9.1.s390x.rpm	SHA-256: 66cab59e26fbd679773215cb0af0cd0e44a8739a7b2403813e6c8608b8b5d825
ntp-debuginfo-4.2.6p5-12.el6_9.1.s390x.rpm	SHA-256: 66cab59e26fbd679773215cb0af0cd0e44a8739a7b2403813e6c8608b8b5d825
ntp-doc-4.2.6p5-12.el6_9.1.noarch.rpm	SHA-256: b3a814e4871c8b1df98f9d718b0ab3b6fb76dc2c3cacfb93db1b108f771eea3b
ntp-perl-4.2.6p5-12.el6_9.1.s390x.rpm	SHA-256: 093ea7e0fcc38750c01dd1862214b9a60a86ef469207f16fdf4865b955a79e14
ntpdate-4.2.6p5-12.el6_9.1.s390x.rpm	SHA-256: 8223eec49033d896377ee40ff2f2256645ff4d1eb588abc2b2e5f5044ee43d27

Red Hat Enterprise Linux for Power, big endian 6

SRPM
ntp-4.2.6p5-12.el6_9.1.src.rpm	SHA-256: cf759d6e6bacd8f6ab3e465f174b5a37e02c5eff0d921ce177375b5ce2b795ee
ppc64
ntp-4.2.6p5-12.el6_9.1.ppc64.rpm	SHA-256: 078faa03f2d62c480d988c5fadeda63c42f4ab3c4f4ef140463a4f3b326fc6b8
ntp-debuginfo-4.2.6p5-12.el6_9.1.ppc64.rpm	SHA-256: 6889ae38a6c676bd5452abaaf5ce68bf2bda28390713b473c5add30eaab47ca2
ntp-debuginfo-4.2.6p5-12.el6_9.1.ppc64.rpm	SHA-256: 6889ae38a6c676bd5452abaaf5ce68bf2bda28390713b473c5add30eaab47ca2
ntp-doc-4.2.6p5-12.el6_9.1.noarch.rpm	SHA-256: b3a814e4871c8b1df98f9d718b0ab3b6fb76dc2c3cacfb93db1b108f771eea3b
ntp-perl-4.2.6p5-12.el6_9.1.ppc64.rpm	SHA-256: 8c6f92d230cd95d0212585a0314e364731a014fdc1762a8615835c29d0dcb36e
ntpdate-4.2.6p5-12.el6_9.1.ppc64.rpm	SHA-256: 8cc1c97d106804511996d320bdd358cf72876d58c05230c951c9539bcb787fc1

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
ntp-4.2.6p5-12.el6_9.1.src.rpm	SHA-256: cf759d6e6bacd8f6ab3e465f174b5a37e02c5eff0d921ce177375b5ce2b795ee
x86_64
ntp-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 4bdbd6e0e12d0477b1ecca01d6a8367fa86a6e07647ea6d8e856f6294d3b1fda
ntp-debuginfo-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 472b4bbc2c9335f8102918044754316543b8185ae408b48bb747820d80e376ef
ntp-debuginfo-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 472b4bbc2c9335f8102918044754316543b8185ae408b48bb747820d80e376ef
ntp-doc-4.2.6p5-12.el6_9.1.noarch.rpm	SHA-256: b3a814e4871c8b1df98f9d718b0ab3b6fb76dc2c3cacfb93db1b108f771eea3b
ntp-perl-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 685e8dc359daf263e3035553d70d00fb1194b0a08c54c301ec28e24591b88823
ntpdate-4.2.6p5-12.el6_9.1.x86_64.rpm	SHA-256: 58bad863a1e38e43d9e7b553da968930d62f17d7ed63af5ebc9b642c5a9b5bdf