CVE-2015-7977
Description
A NULL pointer dereference flaw was found in the way ntpd processed 'ntpdc reslist' commands that queried restriction lists with a large amount of entries. A remote attacker could potentially use this flaw to crash ntpd.
Déclaration
This issue affects the versions of ntp as shipped with Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue in Red Hat Enterprise Linux 6 and 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.
Mesure d'atténuation
Keep the number of restriction list entries in ntp.conf lower than 500.
Détails du score du système commun d'évaluation des vulnérabilités (CVSS)
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
Répartition des scores CVSS v2
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Score de base | 4.3 | 4.3 | N/A |
| Vecteur d'attaque | Network | Network | N/A |
| Complexité d'accès | Medium | Medium | N/A |
| Authentification | None | None | N/A |
| Impact sur la confidentialité | None | None | N/A |
| Impact sur l'intégrité | None | None | N/A |
| Impact sur la disponibilité | Partial | Partial | N/A |
Vecteur
Red Hat: AV:N/AC:M/Au:N/C:N/I:N/A:P
NVD: AV:N/AC:M/Au:N/C:N/I:N/A:P
Comprendre la Défaillance (CWE)
Availability
Technical Impact: DoS: Crash, Exit, or Restart
NULL pointer dereferences usually result in the failure of the process unless exception handling (on some platforms) is available and implemented. Even when exception handling is being used, it can still be very difficult to return the software to a safe state of operation.
Integrity,Confidentiality
Technical Impact: Execute Unauthorized Code or Commands; Read Memory; Modify Memory
In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution.
Questions fréquemment posées
Not sure what something means? Check out our Security Glossary.
Vous souhaitez recevoir des notifications d'errata ? Signez ici.
