Issued:
2018-12-19
Updated:
2018-12-19

RHSA-2018:3853 - Security Advisory

Synopsis

Low: ntp security update

Type/Severity

Security Advisory: Low

Topic

An update for ntp is now available for Red Hat Enterprise Linux 6.7 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Network Time Protocol (NTP) is used to synchronize a computer's time with another referenced time source. These packages include the ntpd service which continuously adjusts system time and utilities used to query and configure the ntpd service.

Security Fix(es):

  • ntp: Stack-based buffer overflow in ntpq and ntpdc allows denial of service or code execution (CVE-2018-12327)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, the ntpd daemon will restart automatically.

Affected Products

  • Red Hat Enterprise Linux Server - Extended Update Support 6.7 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support 6.7 i386
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.7 s390x
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.7 ppc64
  • Red Hat Enterprise Linux EUS Compute Node 6.7 x86_64
  • RHEL for SAP HANA - Extended Update Support 6.7 x86_64

Fixes

  • BZ - 1593580 - CVE-2018-12327 ntp: Stack-based buffer overflow in ntpq and ntpdc allows denial of service or code execution

CVEs

References

Red Hat Enterprise Linux Server - Extended Update Support 6.7

SRPM
ntp-4.2.6p5-5.el6_7.6.src.rpm SHA-256: 7a9160ea2b83dc0a5b66b7d798cf94d63dbf0ebafa9aff68f15a3e6d79e95434
x86_64
ntp-4.2.6p5-5.el6_7.6.x86_64.rpm SHA-256: f88d428f506cfaa3156e4beaa24cbfa884c699ab9d8f0b83a246c05e6573f704
ntp-debuginfo-4.2.6p5-5.el6_7.6.x86_64.rpm SHA-256: 9b1f39c1cdaf3aac6c8cd071d236e2a81b3eeafc9a57a72f64a2cfce96d79e0b
ntp-debuginfo-4.2.6p5-5.el6_7.6.x86_64.rpm SHA-256: 9b1f39c1cdaf3aac6c8cd071d236e2a81b3eeafc9a57a72f64a2cfce96d79e0b
ntp-doc-4.2.6p5-5.el6_7.6.noarch.rpm SHA-256: dfc6561d2a9c45c166c5391df985ec6f4f6d26486c1b2f2d4fea7ac02d1837f6
ntp-perl-4.2.6p5-5.el6_7.6.x86_64.rpm SHA-256: fbc547bb9d91273c8d7b71d243ef3ae22903d975083563b45871bc4078adefa9
ntpdate-4.2.6p5-5.el6_7.6.x86_64.rpm SHA-256: 279baaf635ac5ad8ad6e853bdea01ff11154d01494c63ee1efa5df4d3dca6220
i386
ntp-4.2.6p5-5.el6_7.6.i686.rpm SHA-256: 4641ab70f56c1c0bb881360d74d34ca5db0fa07511d9909a5317dba407a13796
ntp-debuginfo-4.2.6p5-5.el6_7.6.i686.rpm SHA-256: d865dfe08b3ba73f0f68484abc775a88437fd1040f0aad57b5b0e365d3f7974a
ntp-debuginfo-4.2.6p5-5.el6_7.6.i686.rpm SHA-256: d865dfe08b3ba73f0f68484abc775a88437fd1040f0aad57b5b0e365d3f7974a
ntp-doc-4.2.6p5-5.el6_7.6.noarch.rpm SHA-256: dfc6561d2a9c45c166c5391df985ec6f4f6d26486c1b2f2d4fea7ac02d1837f6
ntp-perl-4.2.6p5-5.el6_7.6.i686.rpm SHA-256: 01737b4a29c4aef3e3fea3c2175c58b76bf86ce4b656d1fdffa77c81878d5887
ntpdate-4.2.6p5-5.el6_7.6.i686.rpm SHA-256: 3bc46b9c4ba89b97f0454de3edaec131309a4aae99ed73d009e5b566c0d1e99e

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.7

SRPM
ntp-4.2.6p5-5.el6_7.6.src.rpm SHA-256: 7a9160ea2b83dc0a5b66b7d798cf94d63dbf0ebafa9aff68f15a3e6d79e95434
s390x
ntp-4.2.6p5-5.el6_7.6.s390x.rpm SHA-256: 1a05207f4d98820fda4b5cffd6af356af0b59b0dcc053d92a40b6a0f79d2ffc1
ntp-debuginfo-4.2.6p5-5.el6_7.6.s390x.rpm SHA-256: f0caeef1534e5973a1e6443aaafe05274e980f33207924e3b63ea1163b17c533
ntp-debuginfo-4.2.6p5-5.el6_7.6.s390x.rpm SHA-256: f0caeef1534e5973a1e6443aaafe05274e980f33207924e3b63ea1163b17c533
ntp-doc-4.2.6p5-5.el6_7.6.noarch.rpm SHA-256: dfc6561d2a9c45c166c5391df985ec6f4f6d26486c1b2f2d4fea7ac02d1837f6
ntp-perl-4.2.6p5-5.el6_7.6.s390x.rpm SHA-256: 34f6e8418bdfbcb15b6c9da16447cd239bda9c2c856ca91b4b0666da9fbb717d
ntpdate-4.2.6p5-5.el6_7.6.s390x.rpm SHA-256: f559ec1116b6f30ca744b6fdf6f884751f67f713ea57b78c16283a2ad4061993

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.7

SRPM
ntp-4.2.6p5-5.el6_7.6.src.rpm SHA-256: 7a9160ea2b83dc0a5b66b7d798cf94d63dbf0ebafa9aff68f15a3e6d79e95434
ppc64
ntp-4.2.6p5-5.el6_7.6.ppc64.rpm SHA-256: d7eeb7ba81afe29ae7453d0d6932c29f616eb33cc83fbc03460dcefe7952b029
ntp-debuginfo-4.2.6p5-5.el6_7.6.ppc64.rpm SHA-256: 667995798ab341fb67f36124bdd0a850bf37476241002656d0abf5b82c19909f
ntp-debuginfo-4.2.6p5-5.el6_7.6.ppc64.rpm SHA-256: 667995798ab341fb67f36124bdd0a850bf37476241002656d0abf5b82c19909f
ntp-doc-4.2.6p5-5.el6_7.6.noarch.rpm SHA-256: dfc6561d2a9c45c166c5391df985ec6f4f6d26486c1b2f2d4fea7ac02d1837f6
ntp-perl-4.2.6p5-5.el6_7.6.ppc64.rpm SHA-256: 1d49bdab5789744600b02f1d35bd3361e4b8717b999484f2003481a284bef51e
ntpdate-4.2.6p5-5.el6_7.6.ppc64.rpm SHA-256: 13eff5ee10e6ee9fbf8ade95da7e6f9fb6ec6fdfd7d4fb79d9b224789a42710f

Red Hat Enterprise Linux EUS Compute Node 6.7

SRPM
ntp-4.2.6p5-5.el6_7.6.src.rpm SHA-256: 7a9160ea2b83dc0a5b66b7d798cf94d63dbf0ebafa9aff68f15a3e6d79e95434
x86_64
ntp-4.2.6p5-5.el6_7.6.x86_64.rpm SHA-256: f88d428f506cfaa3156e4beaa24cbfa884c699ab9d8f0b83a246c05e6573f704
ntp-debuginfo-4.2.6p5-5.el6_7.6.x86_64.rpm SHA-256: 9b1f39c1cdaf3aac6c8cd071d236e2a81b3eeafc9a57a72f64a2cfce96d79e0b
ntp-debuginfo-4.2.6p5-5.el6_7.6.x86_64.rpm SHA-256: 9b1f39c1cdaf3aac6c8cd071d236e2a81b3eeafc9a57a72f64a2cfce96d79e0b
ntp-doc-4.2.6p5-5.el6_7.6.noarch.rpm SHA-256: dfc6561d2a9c45c166c5391df985ec6f4f6d26486c1b2f2d4fea7ac02d1837f6
ntp-perl-4.2.6p5-5.el6_7.6.x86_64.rpm SHA-256: fbc547bb9d91273c8d7b71d243ef3ae22903d975083563b45871bc4078adefa9
ntpdate-4.2.6p5-5.el6_7.6.x86_64.rpm SHA-256: 279baaf635ac5ad8ad6e853bdea01ff11154d01494c63ee1efa5df4d3dca6220

RHEL for SAP HANA - Extended Update Support 6.7

SRPM
ntp-4.2.6p5-5.el6_7.6.src.rpm SHA-256: 7a9160ea2b83dc0a5b66b7d798cf94d63dbf0ebafa9aff68f15a3e6d79e95434
x86_64
ntp-4.2.6p5-5.el6_7.6.x86_64.rpm SHA-256: f88d428f506cfaa3156e4beaa24cbfa884c699ab9d8f0b83a246c05e6573f704
ntp-debuginfo-4.2.6p5-5.el6_7.6.x86_64.rpm SHA-256: 9b1f39c1cdaf3aac6c8cd071d236e2a81b3eeafc9a57a72f64a2cfce96d79e0b
ntpdate-4.2.6p5-5.el6_7.6.x86_64.rpm SHA-256: 279baaf635ac5ad8ad6e853bdea01ff11154d01494c63ee1efa5df4d3dca6220

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.