CVE-2009-1252 : 상세 정보

CVE-2009-1252

72.14%V4
2009-05-19
19h00 +00:00
Overflow
Network
2024-08-07
05h04 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

메트릭

메트릭 점수 심각도 CVSS 벡터 출처
V2 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P nvd@nist.gov

EPSS

EPSS는 취약점이 악용될 가능성을 예측하는 점수 모델입니다.

EPSS 점수

EPSS 모델은 0과 1(0~100%) 사이의 확률 점수를 생성합니다. 점수가 높을수록 취약점이 악용될 가능성이 높습니다.

EPSS 백분위수

백분위수는 EPSS 점수에 따라 CVE의 순위를 매기는 데 사용됩니다. 예를 들어 EPSS 점수 기준 95번째 백분위수의 CVE는 다른 CVE의 95%보다 악용될 가능성이 높습니다.

언급된 제품

구성 0

Ntp>>Ntp >> Version 4.2.4p0

Ntp>>Ntp >> Version 4.2.4p1

Ntp>>Ntp >> Version 4.2.4p2

Ntp>>Ntp >> Version 4.2.4p3

Ntp>>Ntp >> Version 4.2.4p4

Ntp>>Ntp >> Version 4.2.4p5

Ntp>>Ntp >> Version 4.2.4p6

Ntp>>Ntp >> Version 4.2.5p0

Ntp>>Ntp >> Version 4.2.5p1

Ntp>>Ntp >> Version 4.2.5p2

Ntp>>Ntp >> Version 4.2.5p3

Ntp>>Ntp >> Version 4.2.5p4

Ntp>>Ntp >> Version 4.2.5p5

Ntp>>Ntp >> Version 4.2.5p6

Ntp>>Ntp >> Version 4.2.5p7

Ntp>>Ntp >> Version 4.2.5p8

Ntp>>Ntp >> Version 4.2.5p9

Ntp>>Ntp >> Version 4.2.5p10

Ntp>>Ntp >> Version 4.2.5p11

Ntp>>Ntp >> Version 4.2.5p12

Ntp>>Ntp >> Version 4.2.5p13

Ntp>>Ntp >> Version 4.2.5p14

Ntp>>Ntp >> Version 4.2.5p15

Ntp>>Ntp >> Version 4.2.5p16

Ntp>>Ntp >> Version 4.2.5p17

Ntp>>Ntp >> Version 4.2.5p18

Ntp>>Ntp >> Version 4.2.5p19

Ntp>>Ntp >> Version 4.2.5p20

Ntp>>Ntp >> Version 4.2.5p21

Ntp>>Ntp >> Version 4.2.5p23

Ntp>>Ntp >> Version 4.2.5p24

Ntp>>Ntp >> Version 4.2.5p25

Ntp>>Ntp >> Version 4.2.5p26

Ntp>>Ntp >> Version 4.2.5p27

Ntp>>Ntp >> Version 4.2.5p28

Ntp>>Ntp >> Version 4.2.5p29

Ntp>>Ntp >> Version 4.2.5p30

Ntp>>Ntp >> Version 4.2.5p31

Ntp>>Ntp >> Version 4.2.5p32

Ntp>>Ntp >> Version 4.2.5p33

Ntp>>Ntp >> Version 4.2.5p35

Ntp>>Ntp >> Version 4.2.5p36

Ntp>>Ntp >> Version 4.2.5p37

Ntp>>Ntp >> Version 4.2.5p38

Ntp>>Ntp >> Version 4.2.5p39

Ntp>>Ntp >> Version 4.2.5p40

Ntp>>Ntp >> Version 4.2.5p41

Ntp>>Ntp >> Version 4.2.5p42

Ntp>>Ntp >> Version 4.2.5p43

Ntp>>Ntp >> Version 4.2.5p44

Ntp>>Ntp >> Version 4.2.5p45

Ntp>>Ntp >> Version 4.2.5p46

Ntp>>Ntp >> Version 4.2.5p47

Ntp>>Ntp >> Version 4.2.5p48

Ntp>>Ntp >> Version 4.2.5p49

Ntp>>Ntp >> Version 4.2.5p50

Ntp>>Ntp >> Version 4.2.5p51

Ntp>>Ntp >> Version 4.2.5p52

Ntp>>Ntp >> Version 4.2.5p53

Ntp>>Ntp >> Version 4.2.5p54

Ntp>>Ntp >> Version 4.2.5p55

Ntp>>Ntp >> Version 4.2.5p56

Ntp>>Ntp >> Version 4.2.5p57

Ntp>>Ntp >> Version 4.2.5p58

Ntp>>Ntp >> Version 4.2.5p59

Ntp>>Ntp >> Version 4.2.5p60

Ntp>>Ntp >> Version 4.2.5p61

Ntp>>Ntp >> Version 4.2.5p62

Ntp>>Ntp >> Version 4.2.5p63

Ntp>>Ntp >> Version 4.2.5p64

Ntp>>Ntp >> Version 4.2.5p65

Ntp>>Ntp >> Version 4.2.5p66

Ntp>>Ntp >> Version 4.2.5p67

Ntp>>Ntp >> Version 4.2.5p68

Ntp>>Ntp >> Version 4.2.5p69

Ntp>>Ntp >> Version 4.2.5p70

Ntp>>Ntp >> Version 4.2.5p71

Ntp>>Ntp >> Version 4.2.5p73

참고 자료

https://usn.ubuntu.com/777-1/
Tags : vendor-advisory, x_refsource_UBUNTU
http://secunia.com/advisories/35137
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/35166
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/37470
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/35388
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/35243
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/37471
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.debian.org/security/2009/dsa-1801
Tags : vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/35308
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/35253
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDVSA-2009:117
Tags : vendor-advisory, x_refsource_MANDRIVA
http://www.securitytracker.com/id?1022243
Tags : vdb-entry, x_refsource_SECTRACK
http://secunia.com/advisories/35138
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/35630
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/35017
Tags : vdb-entry, x_refsource_BID
http://rhn.redhat.com/errata/RHSA-2009-1040.html
Tags : vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/35416
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.kb.cert.org/vuls/id/853097
Tags : third-party-advisory, x_refsource_CERT-VN
http://secunia.com/advisories/35336
Tags : third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2009-1039.html
Tags : vendor-advisory, x_refsource_REDHAT
http://www.vupen.com/english/advisories/2009/1361
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/35169
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml
Tags : vendor-advisory, x_refsource_GENTOO
http://www.vupen.com/english/advisories/2009/3316
Tags : vdb-entry, x_refsource_VUPEN