Important CentOS ntp Security Update

Metadata

high
7.5
ntp-4.2.6p5-19.el7.centos.src.rpm, ntp-4.2.6p5-19.el7.centos.x86_64.rpm, ntp-4.2.6p5-2.el6.centos.i686.rpm, ntp-4.2.6p5-2.el6.centos.src.rpm, ntp-4.2.6p5-2.el6.centos.x86_64.rpm, ntp-doc-4.2.6p5-19.el7.centos.noarch.rpm, ntp-doc-4.2.6p5-2.el6.centos.noarch.rpm, ntp-perl-4.2.6p5-19.el7.centos.noarch.rpm, ntp-perl-4.2.6p5-2.el6.centos.i686.rpm, ntp-perl-4.2.6p5-2.el6.centos.x86_64.rpm, ntpdate-4.2.6p5-19.el7.centos.x86_64.rpm, ntpdate-4.2.6p5-2.el6.centos.i686.rpm, ntpdate-4.2.6p5-2.el6.centos.x86_64.rpm, sntp-4.2.6p5-19.el7.centos.x86_64.rpm
CVE-2014-9293, CVE-2014-9294, CVE-2014-9295, CVE-2014-9296
rhn.redhat.com, lists.centos.org, lists.centos.org
2014-12-20
2017-07-27 19:08
ALAS-2014-462
Important CentOS ntp Security Update
CVE-2014-9294 ntp
CVE-2014-9293 ntp
CVE-2014-9296 ntp
CVE-2014-9295 ntp
CVE-2014-9294
CVE-2014-9295
CVE-2014-9293
CVE-2014-9296
2017-04-01 19:08
2017-01-05 20:12

Description


Updated ntp packages that fix several security issues are now available
for Red Hat Enterprise Linux 6 and 7.

Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

The Network Time Protocol (NTP) is used to synchronize a computer's time
with a referenced time source.

Multiple buffer overflow flaws were discovered in ntpd's crypto_recv(),
ctl_putdata(), and configure() functions. A remote attacker could use
either of these flaws to send a specially crafted request packet that could
crash ntpd or, potentially, execute arbitrary code with the privileges of
the ntp user. Note: the crypto_recv() flaw requires non-default
configurations to be active, while the ctl_putdata() flaw, by default, can
only be exploited via local attackers, and the configure() flaw requires
additional authentication to exploit. (CVE-2014-9295)

It was found that ntpd automatically generated weak keys for its internal
use if no ntpdc request authentication key was specified in the ntp.conf
configuration file. A remote attacker able to match the configured IP
restrictions could guess the generated key, and possibly use it to send
ntpdc query or configuration requests. (CVE-2014-9293)

It was found that ntp-keygen used a weak method for generating MD5 keys.
This could possibly allow an attacker to guess generated MD5 keys that
could then be used to spoof an NTP client or server. Note: it is
recommended to regenerate any MD5 keys that had explicitly been generated
with ntp-keygen; the default installation does not contain such keys).
(CVE-2014-9294)

A missing return statement in the receive() function could potentially
allow a remote attacker to bypass NTP's authentication mechanism.
(CVE-2014-9296)

All ntp users are advised to upgrade to this updated package, which
contains backported patches to resolve these issues. After installing the
update, the ntpd daemon will restart automatically.
Please see https://www.redhat.com/footer/terms-of-use.html

Am I vulnerable?

The constraints below list the versions that this vulnerability is patched in, and versions that are unaffected. If a patch is ready but unrealeased, then it is pending.

Or, you can just let us figure it out for you! Appcanary continously monitor your installed packages, and tell you if any of them are vulnerable.

Sign up for monitoring

Affected package information

Release Package Patched in
6 ntp ntp-4.2.6p5-2.el6.centos.src.rpm
ntp ntp-4.2.6p5-2.el6.centos.x86_64.rpm
ntp ntp-4.2.6p5-2.el6.centos.i686.rpm
ntpdate ntpdate-4.2.6p5-2.el6.centos.x86_64.rpm
ntpdate ntpdate-4.2.6p5-2.el6.centos.i686.rpm
ntp-doc ntp-doc-4.2.6p5-2.el6.centos.noarch.rpm
ntp-perl ntp-perl-4.2.6p5-2.el6.centos.i686.rpm
ntp-perl ntp-perl-4.2.6p5-2.el6.centos.x86_64.rpm
7 ntp ntp-4.2.6p5-19.el7.centos.x86_64.rpm
ntp ntp-4.2.6p5-19.el7.centos.src.rpm
ntpdate ntpdate-4.2.6p5-19.el7.centos.x86_64.rpm
ntp-doc ntp-doc-4.2.6p5-19.el7.centos.noarch.rpm
ntp-perl ntp-perl-4.2.6p5-19.el7.centos.noarch.rpm
sntp sntp-4.2.6p5-19.el7.centos.x86_64.rpm