Security update for ntp SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:1311-1 Final 1 1 2016-05-17T09:29:35Z current 2016-05-17T09:29:35Z 2016-05-17T09:29:35Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ntp This network time protocol server ntp was updated to 4.2.8p6 to fix the following issues: Also yast2-ntp-client was updated to match some sntp syntax changes. (bsc#937837) Major functional changes: - The 'sntp' commandline tool changed its option handling in a major way. - 'controlkey 1' is added during update to ntp.conf to allow sntp to work. - The local clock is being disabled during update. - ntpd is no longer running chrooted. Other functional changes: - ntp-signd is installed. - 'enable mode7' can be added to the configuration to allow ntdpc to work as compatibility mode option. - 'kod' was removed from the default restrictions. - SHA1 keys are used by default instead of MD5 keys. These security issues were fixed: - CVE-2015-5219: An endless loop due to incorrect precision to double conversion (bsc#943216). - CVE-2015-8158: Fixed potential infinite loop in ntpq (bsc#962966). - CVE-2015-8138: Zero Origin Timestamp Bypass (bsc#963002). - CVE-2015-7979: Off-path Denial of Service (DoS) attack on authenticated broadcast mode (bsc#962784). - CVE-2015-7978: Stack exhaustion in recursive traversal of restriction list (bsc#963000). - CVE-2015-7977: reslist NULL pointer dereference (bsc#962970). - CVE-2015-7976: ntpq saveconfig command allows dangerous characters in filenames (bsc#962802). - CVE-2015-7975: nextvar() missing length check (bsc#962988). - CVE-2015-7974: Skeleton Key: Missing key check allows impersonation between authenticated peers (bsc#962960). - CVE-2015-7973: Replay attack on authenticated broadcast mode (bsc#962995). - CVE-2015-8140: ntpq vulnerable to replay attacks (bsc#962994). - CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin (bsc#962997). - CVE-2015-5300: MITM attacker could have forced ntpd to make a step larger than the panic threshold (bsc#951629). - CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK (bsc#951608). - CVE-2015-7855: decodenetnum() will ASSERT botch instead of returning FAIL on some bogus values (bsc#951608). - CVE-2015-7854: Password Length Memory Corruption Vulnerability (bsc#951608). - CVE-2015-7853: Invalid length data provided by a custom refclock driver could cause a buffer overflow (bsc#951608). - CVE-2015-7852: ntpq atoascii() Memory Corruption Vulnerability (bsc#951608). - CVE-2015-7851: saveconfig Directory Traversal Vulnerability (bsc#951608). - CVE-2015-7850: remote config logfile-keyfile (bsc#951608). - CVE-2015-7849: trusted key use-after-free (bsc#951608). - CVE-2015-7848: mode 7 loop counter underrun (bsc#951608). - CVE-2015-7701: Slow memory leak in CRYPTO_ASSOC (bsc#951608). - CVE-2015-7703: configuration directives 'pidfile' and 'driftfile' should only be allowed locally (bsc#951608). - CVE-2015-7704, CVE-2015-7705: Clients that receive a KoD should validate the origin timestamp field (bsc#951608). - CVE-2015-7691, CVE-2015-7692, CVE-2015-7702: Incomplete autokey data packet length checks (bsc#951608). These non-security issues were fixed: - fate#320758 bsc#975981: Enable compile-time support for MS-SNTP (--enable-ntp-signd). This replaces the w32 patches in 4.2.4 that added the authreg directive. - bsc#962318: Call /usr/sbin/sntp with full path to synchronize in start-ntpd. When run as cron job, /usr/sbin/ is not in the path, which caused the synchronization to fail. - bsc#782060: Speedup ntpq. - bsc#916617: Add /var/db/ntp-kod. - bsc#956773: Add ntp-ENOBUFS.patch to limit a warning that might happen quite a lot on loaded systems. - bsc#951559,bsc#975496: Fix the TZ offset output of sntp during DST. - Add ntp-fork.patch and build with threads disabled to allow name resolution even when running chrooted. - Add a controlkey line to /etc/ntp.conf if one does not already exist to allow runtime configuuration via ntpq. - bsc#946386: Temporarily disable memlock to avoid problems due to high memory usage during name resolution. - bsc#905885: Use SHA1 instead of MD5 for symmetric keys. - Improve runtime configuration: * Read keytype from ntp.conf * Don't write ntp keys to syslog. - Fix legacy action scripts to pass on command line arguments. - bsc#944300: Remove 'kod' from the restrict line in ntp.conf. - bsc#936327: Use ntpq instead of deprecated ntpdc in start-ntpd. - Don't let 'keysdir' lines in ntp.conf trigger the 'keys' parser. - Disable mode 7 (ntpdc) again, now that we don't use it anymore. - Add 'addserver' as a new legacy action. - bsc#910063: Fix the comment regarding addserver in ntp.conf. - bsc#926510: Disable chroot by default. - bsc#920238: Enable ntpdc for backwards compatibility. - bsc#784760: Remove local clock from default configuration. - bsc#942441/fate#319496: Require perl-Socket6. - Improve runtime configuration: * Read keytype from ntp.conf * Don't write ntp keys to syslog. - bsc#920183: Allow -4 and -6 address qualifiers in 'server' directives. - Use upstream ntp-wait, because our version is incompatible with the new ntpq command line syntax. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sleclo50sp3-ntp-12561,sleman21-ntp-12561,slemap21-ntp-12561,slessp2-ntp-12561,slessp3-ntp-12561 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ Link for SUSE-SU-2016:1311-1 https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html E-Mail link for SUSE-SU-2016:1311-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/782060 SUSE Bug 782060 https://bugzilla.suse.com/784760 SUSE Bug 784760 https://bugzilla.suse.com/905885 SUSE Bug 905885 https://bugzilla.suse.com/910063 SUSE Bug 910063 https://bugzilla.suse.com/916617 SUSE Bug 916617 https://bugzilla.suse.com/920183 SUSE Bug 920183 https://bugzilla.suse.com/920238 SUSE Bug 920238 https://bugzilla.suse.com/926510 SUSE Bug 926510 https://bugzilla.suse.com/936327 SUSE Bug 936327 https://bugzilla.suse.com/937837 SUSE Bug 937837 https://bugzilla.suse.com/942441 SUSE Bug 942441 https://bugzilla.suse.com/942587 SUSE Bug 942587 https://bugzilla.suse.com/943216 SUSE Bug 943216 https://bugzilla.suse.com/943218 SUSE Bug 943218 https://bugzilla.suse.com/944300 SUSE Bug 944300 https://bugzilla.suse.com/946386 SUSE Bug 946386 https://bugzilla.suse.com/951351 SUSE Bug 951351 https://bugzilla.suse.com/951559 SUSE Bug 951559 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/951629 SUSE Bug 951629 https://bugzilla.suse.com/954982 SUSE Bug 954982 https://bugzilla.suse.com/956773 SUSE Bug 956773 https://bugzilla.suse.com/962318 SUSE Bug 962318 https://bugzilla.suse.com/962784 SUSE Bug 962784 https://bugzilla.suse.com/962802 SUSE Bug 962802 https://bugzilla.suse.com/962960 SUSE Bug 962960 https://bugzilla.suse.com/962966 SUSE Bug 962966 https://bugzilla.suse.com/962970 SUSE Bug 962970 https://bugzilla.suse.com/962988 SUSE Bug 962988 https://bugzilla.suse.com/962994 SUSE Bug 962994 https://bugzilla.suse.com/962995 SUSE Bug 962995 https://bugzilla.suse.com/962997 SUSE Bug 962997 https://bugzilla.suse.com/963000 SUSE Bug 963000 https://bugzilla.suse.com/963002 SUSE Bug 963002 https://bugzilla.suse.com/975496 SUSE Bug 975496 https://bugzilla.suse.com/975981 SUSE Bug 975981 https://www.suse.com/security/cve/CVE-2015-5194/ SUSE CVE CVE-2015-5194 page https://www.suse.com/security/cve/CVE-2015-5219/ SUSE CVE CVE-2015-5219 page https://www.suse.com/security/cve/CVE-2015-5300/ SUSE CVE CVE-2015-5300 page https://www.suse.com/security/cve/CVE-2015-7691/ SUSE CVE CVE-2015-7691 page https://www.suse.com/security/cve/CVE-2015-7692/ SUSE CVE CVE-2015-7692 page https://www.suse.com/security/cve/CVE-2015-7701/ SUSE CVE CVE-2015-7701 page https://www.suse.com/security/cve/CVE-2015-7702/ SUSE CVE CVE-2015-7702 page https://www.suse.com/security/cve/CVE-2015-7703/ SUSE CVE CVE-2015-7703 page https://www.suse.com/security/cve/CVE-2015-7704/ SUSE CVE CVE-2015-7704 page https://www.suse.com/security/cve/CVE-2015-7705/ SUSE CVE CVE-2015-7705 page https://www.suse.com/security/cve/CVE-2015-7848/ SUSE CVE CVE-2015-7848 page https://www.suse.com/security/cve/CVE-2015-7849/ SUSE CVE CVE-2015-7849 page https://www.suse.com/security/cve/CVE-2015-7850/ SUSE CVE CVE-2015-7850 page https://www.suse.com/security/cve/CVE-2015-7851/ SUSE CVE CVE-2015-7851 page https://www.suse.com/security/cve/CVE-2015-7852/ SUSE CVE CVE-2015-7852 page https://www.suse.com/security/cve/CVE-2015-7853/ SUSE CVE CVE-2015-7853 page https://www.suse.com/security/cve/CVE-2015-7854/ SUSE CVE CVE-2015-7854 page https://www.suse.com/security/cve/CVE-2015-7855/ SUSE CVE CVE-2015-7855 page https://www.suse.com/security/cve/CVE-2015-7871/ SUSE CVE CVE-2015-7871 page https://www.suse.com/security/cve/CVE-2015-7973/ SUSE CVE CVE-2015-7973 page https://www.suse.com/security/cve/CVE-2015-7974/ SUSE CVE CVE-2015-7974 page https://www.suse.com/security/cve/CVE-2015-7975/ SUSE CVE CVE-2015-7975 page https://www.suse.com/security/cve/CVE-2015-7976/ SUSE CVE CVE-2015-7976 page https://www.suse.com/security/cve/CVE-2015-7977/ SUSE CVE CVE-2015-7977 page https://www.suse.com/security/cve/CVE-2015-7978/ SUSE CVE CVE-2015-7978 page https://www.suse.com/security/cve/CVE-2015-7979/ SUSE CVE CVE-2015-7979 page https://www.suse.com/security/cve/CVE-2015-8138/ SUSE CVE CVE-2015-8138 page https://www.suse.com/security/cve/CVE-2015-8139/ SUSE CVE CVE-2015-8139 page https://www.suse.com/security/cve/CVE-2015-8140/ SUSE CVE CVE-2015-8140 page https://www.suse.com/security/cve/CVE-2015-8158/ SUSE CVE CVE-2015-8158 page SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Manager 2.1 SUSE Manager Proxy 2.1 SUSE OpenStack Cloud 5 ntp-4.2.8p6-41.1 ntp-doc-4.2.8p6-41.1 yast2-ntp-client-2.17.14.1-1.12.1 ntp-4.2.8p6-41.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS ntp-doc-4.2.8p6-41.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS yast2-ntp-client-2.17.14.1-1.12.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS ntp-4.2.8p6-41.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS ntp-doc-4.2.8p6-41.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS ntp-4.2.8p6-41.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA ntp-doc-4.2.8p6-41.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA ntp-4.2.8p6-41.1 as a component of SUSE Manager 2.1 ntp-doc-4.2.8p6-41.1 as a component of SUSE Manager 2.1 ntp-4.2.8p6-41.1 as a component of SUSE Manager Proxy 2.1 ntp-doc-4.2.8p6-41.1 as a component of SUSE Manager Proxy 2.1 ntp-4.2.8p6-41.1 as a component of SUSE OpenStack Cloud 5 ntp-doc-4.2.8p6-41.1 as a component of SUSE OpenStack Cloud 5 The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted logconfig commands. CVE-2015-5194 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 important 3.3 AV:A/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-5194.html CVE-2015-5194 https://bugzilla.suse.com/943216 SUSE Bug 943216 https://bugzilla.suse.com/943218 SUSE Bug 943218 https://bugzilla.suse.com/943219 SUSE Bug 943219 https://bugzilla.suse.com/943221 SUSE Bug 943221 https://bugzilla.suse.com/959243 SUSE Bug 959243 The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet. CVE-2015-5219 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-5219.html CVE-2015-5219 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/943216 SUSE Bug 943216 https://bugzilla.suse.com/943218 SUSE Bug 943218 https://bugzilla.suse.com/943219 SUSE Bug 943219 https://bugzilla.suse.com/943221 SUSE Bug 943221 https://bugzilla.suse.com/959243 SUSE Bug 959243 The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart). CVE-2015-5300 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-5300.html CVE-2015-5300 https://bugzilla.suse.com/951629 SUSE Bug 951629 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/962624 SUSE Bug 962624 The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750. CVE-2015-7691 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7691.html CVE-2015-7691 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/911792 SUSE Bug 911792 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/992991 SUSE Bug 992991 The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750. CVE-2015-7692 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7692.html CVE-2015-7692 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/911792 SUSE Bug 911792 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/992991 SUSE Bug 992991 Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption). CVE-2015-7701 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7701.html CVE-2015-7701 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/992991 SUSE Bug 992991 The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750. CVE-2015-7702 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7702.html CVE-2015-7702 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/911792 SUSE Bug 911792 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/992991 SUSE Bug 992991 The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command. CVE-2015-7703 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7703.html CVE-2015-7703 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/943216 SUSE Bug 943216 https://bugzilla.suse.com/943218 SUSE Bug 943218 https://bugzilla.suse.com/943219 SUSE Bug 943219 https://bugzilla.suse.com/943221 SUSE Bug 943221 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/959243 SUSE Bug 959243 The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages. CVE-2015-7704 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7704.html CVE-2015-7704 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/952611 SUSE Bug 952611 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/977446 SUSE Bug 977446 The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests. CVE-2015-7705 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7705.html CVE-2015-7705 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/952611 SUSE Bug 952611 https://bugzilla.suse.com/959243 SUSE Bug 959243 An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash. CVE-2015-7848 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7848.html CVE-2015-7848 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/992991 SUSE Bug 992991 Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets. CVE-2015-7849 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7849.html CVE-2015-7849 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/992991 SUSE Bug 992991 ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file. CVE-2015-7850 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7850.html CVE-2015-7850 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/992991 SUSE Bug 992991 Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files. CVE-2015-7851 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7851.html CVE-2015-7851 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/959243 SUSE Bug 959243 ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets. CVE-2015-7852 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7852.html CVE-2015-7852 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/992991 SUSE Bug 992991 The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value. CVE-2015-7853 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7853.html CVE-2015-7853 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/992991 SUSE Bug 992991 Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file. CVE-2015-7854 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7854.html CVE-2015-7854 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/992991 SUSE Bug 992991 The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value. CVE-2015-7855 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7855.html CVE-2015-7855 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/992991 SUSE Bug 992991 Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication. CVE-2015-7871 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7871.html CVE-2015-7871 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/952606 SUSE Bug 952606 https://bugzilla.suse.com/959243 SUSE Bug 959243 NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network. CVE-2015-7973 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 moderate 4.3 AV:A/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7973.html CVE-2015-7973 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/962995 SUSE Bug 962995 NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key." CVE-2015-7974 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 low 2.1 AV:N/AC:H/Au:S/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7974.html CVE-2015-7974 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/962960 SUSE Bug 962960 https://bugzilla.suse.com/962995 SUSE Bug 962995 The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash). CVE-2015-7975 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 low 4 AV:L/AC:H/Au:N/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7975.html CVE-2015-7975 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/962988 SUSE Bug 962988 https://bugzilla.suse.com/962995 SUSE Bug 962995 The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename. CVE-2015-7976 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 low 4 AV:N/AC:L/Au:S/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7976.html CVE-2015-7976 https://bugzilla.suse.com/962802 SUSE Bug 962802 https://bugzilla.suse.com/962995 SUSE Bug 962995 ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command. CVE-2015-7977 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7977.html CVE-2015-7977 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/962970 SUSE Bug 962970 https://bugzilla.suse.com/962995 SUSE Bug 962995 NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list. CVE-2015-7978 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7978.html CVE-2015-7978 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/962970 SUSE Bug 962970 https://bugzilla.suse.com/962995 SUSE Bug 962995 https://bugzilla.suse.com/963000 SUSE Bug 963000 NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client. CVE-2015-7979 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 moderate 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-7979.html CVE-2015-7979 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/962784 SUSE Bug 962784 https://bugzilla.suse.com/962995 SUSE Bug 962995 https://bugzilla.suse.com/977459 SUSE Bug 977459 https://bugzilla.suse.com/982065 SUSE Bug 982065 NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero. CVE-2015-8138 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-8138.html CVE-2015-8138 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/963002 SUSE Bug 963002 https://bugzilla.suse.com/974668 SUSE Bug 974668 https://bugzilla.suse.com/977446 SUSE Bug 977446 ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors. CVE-2015-8139 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-8139.html CVE-2015-8139 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/962997 SUSE Bug 962997 The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network. CVE-2015-8140 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 moderate 5.4 AV:A/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-8140.html CVE-2015-8140 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/962994 SUSE Bug 962994 The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values. CVE-2015-8158 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP2-LTSS:yast2-ntp-client-2.17.14.1-1.12.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p6-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p6-41.1 SUSE Manager 2.1:ntp-4.2.8p6-41.1 SUSE Manager 2.1:ntp-doc-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-4.2.8p6-41.1 SUSE Manager Proxy 2.1:ntp-doc-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-4.2.8p6-41.1 SUSE OpenStack Cloud 5:ntp-doc-4.2.8p6-41.1 low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161311-1/ https://www.suse.com/security/cve/CVE-2015-8158.html CVE-2015-8158 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/962966 SUSE Bug 962966