CVE-2017-6458

Published: Mar 27, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.

Affected (28)

Products: Ntp: Ntp · Hpe: Hpux Ntp · Apple: Mac Os X · +1 more

Show all products

Ntp: Ntp · Hpe: Hpux Ntp · Apple: Mac Os X · Siemens: Simatic Net Cp 443 1 Opc Ua Firmware

1 product

1 product

1 product

1 product

Simatic Net Cp 443 1 Opc Ua Firmware

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Ntp Ntp	Before 4.2.8
Ntp Ntp	From 4.3.0 to 4.3.94
Ntp Ntp	Version 4.2.8
Ntp Ntp	Version 4.2.8 p1-beta1
Ntp Ntp	Version 4.2.8 p1-beta2
Ntp Ntp	Version 4.2.8 p1-beta3
Ntp Ntp	Version 4.2.8 p1-beta4
Ntp Ntp	Version 4.2.8 p1-beta5
Ntp Ntp	Version 4.2.8 p1-rc1
Ntp Ntp	Version 4.2.8 p1-rc2
Ntp Ntp	Version 4.2.8 p1
Ntp Ntp	Version 4.2.8 p2-rc1
Ntp Ntp	Version 4.2.8 p2-rc2
Ntp Ntp	Version 4.2.8 p2-rc3
Ntp Ntp	Version 4.2.8 p2
Ntp Ntp	Version 4.2.8 p3-rc1
Ntp Ntp	Version 4.2.8 p3-rc2
Ntp Ntp	Version 4.2.8 p3-rc3
Ntp Ntp	Version 4.2.8 p3
Ntp Ntp	Version 4.2.8 p4
Ntp Ntp	Version 4.2.8 p5
Ntp Ntp	Version 4.2.8 p6
Ntp Ntp	Version 4.2.8 p7
Ntp Ntp	Version 4.2.8 p8
Ntp Ntp	Version 4.2.8 p9

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Hpe Hpux Ntp	Before c.4.2.8.4.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	From 10.8.0 to 10.13

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Net Cp 443 1 Opc Ua Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Net Cp 443 1 Opc Ua	All versions

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (40)

http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2017/Nov/7

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2017/Sep/62

Source: cve@mitre.org

http://support.ntp.org/bin/view/Main/NtpBug3379

Source: cve@mitre.org

PatchVendor Advisory

http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/97051

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038123

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-3349-1

Source: cve@mitre.org

https://bto.bluecoat.com/security-advisory/sa147

Source: cve@mitre.org

https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf

Source: cve@mitre.org

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4B7BMVXV53EE7XYW2KAVETDHTP452O3Z/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZUPPICJXWL3AWQB7I3AWUC74YON7UING/

Source: cve@mitre.org

https://support.apple.com/HT208144

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT208144

Source: cve@mitre.org

https://support.f5.com/csp/article/K99254031

Source: cve@mitre.org

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us

Source: cve@mitre.org

Third Party Advisory

https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11

Source: cve@mitre.org

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-294/

Source: cve@mitre.org

http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2017/Nov/7

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2017/Sep/62

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.ntp.org/bin/view/Main/NtpBug3379

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/97051

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038123

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-3349-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bto.bluecoat.com/security-advisory/sa147

Source: af854a3a-2127-422b-91ae-364da2661108

https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4B7BMVXV53EE7XYW2KAVETDHTP452O3Z/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZUPPICJXWL3AWQB7I3AWUC74YON7UING/

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT208144

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT208144

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.f5.com/csp/article/K99254031

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-294/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.