CVE-2016-7433— NTP 安全漏洞

一分钟漏洞结论

复制摘要 复制引用

影响对象

n/a n/a

利用判断

利用概率较高，应尽快评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

NTP（Network Time Protocol，网络时间协议）是一款通过网络同步计算机时钟的协议。 NTP 4.2.8p9之前的版本中存在安全漏洞，该漏洞源于程序没有正确的执行初始的同步计算。远程攻击者可利用该漏洞造成拒绝服务。

CVE-2016-7433 影响 n/a n/a。利用概率较高，应尽快评估。NTP（Network Time Protocol，网络时间协议）是一款通过网络同步计算机时钟的协议。 NTP 4.2.8p9之前的版本中存在安全漏洞，该漏洞源于程序没有正确的执行初始的同步计算。远程攻击者可利用该漏洞造成拒绝服务。 CVE-2016-7433 漏洞详情，神龙漏洞库，https://cve.imfht.com/detail/CVE-2016-7433

一、 漏洞 CVE-2016-7433 基础信息

受影响产品

二、漏洞 CVE-2016-7433 的公开POC

三、漏洞 CVE-2016-7433 的情报信息

CVE-2016-7433 厂商安全公告 (12)

• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html x_refsource_CONFIRM
• https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11 x_refsource_MISC
• https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf x_refsource_CONFIRM
• http://www.securityfocus.com/bid/94455 vdb-entry x_refsource_BID
• http://www.securitytracker.com/id/1037354 vdb-entry x_refsource_SECTRACK
• https://www.kb.cert.org/vuls/id/633847 third-party-advisory x_refsource_CERT-VN
• http://www.ubuntu.com/usn/USN-3349-1 vendor-advisory x_refsource_UBUNTU
• http://rhn.redhat.com/errata/RHSA-2017-0252.html vendor-advisory x_refsource_REDHAT
• http://www.securityfocus.com/archive/1/archive/1/539955/100/0/threaded mailing-list x_refsource_BUGTRAQ
• http://www.securityfocus.com/archive/1/539955/100/0/threaded mailing-list x_refsource_BUGTRAQ
• http://www.securityfocus.com/archive/1/540254/100/0/threaded mailing-list x_refsource_BUGTRAQ
• http://www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded mailing-list x_refsource_BUGTRAQ

CVE-2016-7433 邮件列表归档 (4)

• http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html vendor-advisory x_refsource_SUSE
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5E3XBBCK5IXOLDAH2E4M3QKIYIHUMMP/ vendor-advisory x_refsource_FEDORA
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PABKEYX6ABBFJZGMXKH57X756EJUDS3C/ vendor-advisory x_refsource_FEDORA
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ILMSYVQMMF37MANYEO7KBHOPSC74EKGN/ vendor-advisory x_refsource_FEDORA

CVE-2016-7433 其他参考 (9)

• http://nwtime.org/ntp428p9_release/ x_refsource_CONFIRM
• http://support.ntp.org/bin/view/Main/NtpBug3067 x_refsource_CONFIRM
• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-227/ x_refsource_CONFIRM
• http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities x_refsource_CONFIRM
• https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us x_refsource_CONFIRM
• https://bto.bluecoat.com/security-advisory/sa139 x_refsource_CONFIRM
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en x_refsource_CONFIRM
• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-227 x_refsource_CONFIRM
• https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc vendor-advisory x_refsource_FREEBSD

• https://www.cve.org/CVERecord?id=CVE-2016-7433

同批安全公告 · n/a · 2017-01-13 · 共 39 条

显示前 20 条，共 39 条。 查看全部 → →

IV. Related Vulnerabilities

V. Comments for CVE-2016-7433