NetSight
IP …
medium5.3

CVE-2016-2518

The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer reque…

Impact

The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.

Affected products

VendorProductAffected versions
NtpNtp
before 4.2.8
from 4.3.0 before 4.3.92
Version 4.2.8
DebianDebian Linux
Versions 8.0, 9.0, 10.0
NetappClustered Data Ontap
All versions
NetappData Ontap
All versions
NetappOncommand Balance
All versions
NetappOncommand Performance Manager
All versions
NetappOncommand Unified Manager For Clustered Data Ontap
All versions
OracleCommunications User Data Repository
Versions 10.0.0, 10.0.1, 12.0.0
OracleLinux
Versions 6, 7
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.2, 7.4, 7.6

Weakness classification

CWE-125

References