SUSE-SU-2016:3195-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2016/suse-su-20163195-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:3195-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2016:3195-1
Related
Published
2016-12-19T16:08:04Z
Modified
2016-12-19T16:08:04Z
Summary
Security update for ntp
Details

This update for ntp fixes the following issues:

ntp was updated to 4.2.8p9.

Security issues fixed:

  • CVE-2016-9311, CVE-2016-9310, bsc#1011377: Mode 6 unauthenticated trap information disclosure and DDoS vector.
  • CVE-2016-7427, bsc#1011390: Broadcast Mode Replay Prevention DoS.
  • CVE-2016-7428, bsc#1011417: Broadcast Mode Poll Interval Enforcement DoS.
  • CVE-2016-7431, bsc#1011395: Regression: 010-origin: Zero Origin Timestamp Bypass.
  • CVE-2016-7434, bsc#1011398: Null pointer dereference in IOstrinitstatic_internal().
  • CVE-2016-7429, bsc#1011404: Interface selection attack.
  • CVE-2016-7426, bsc#1011406: Client rate limiting and server responses.
  • CVE-2016-7433, bsc#1011411: Reboot sync calculation problem.
  • CVE-2015-5219: An endless loop due to incorrect precision to double conversion (bsc#943216).

Non-security issues fixed:

  • Fix a spurious error message.
  • Other bugfixes, see /usr/share/doc/packages/ntp/ChangeLog.
  • Fix a regression in 'trap' (bsc#981252).
  • Reduce the number of netlink groups to listen on for changes to the local network setup (bsc#992606).
  • Fix segfault in 'sntp -a' (bsc#1009434).
  • Silence an OpenSSL version warning (bsc#992038).
  • Make the resolver task change user and group IDs to the same values as the main task. (bsc#988028)
  • Simplify ntpd's search for its own executable to prevent AppArmor warnings (bsc#956365).
References

Affected packages

SUSE:Linux Enterprise Desktop 12 SP1 / ntp

Package

Name
ntp
Purl
pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.2.8p9-55.1

Ecosystem specific 

{
    "binaries": [
        {
            "ntp-doc": "4.2.8p9-55.1",
            "ntp": "4.2.8p9-55.1"
        }
    ]
}

SUSE:Linux Enterprise Desktop 12 SP2 / ntp

Package

Name
ntp
Purl
pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.2.8p9-55.1

Ecosystem specific 

{
    "binaries": [
        {
            "ntp-doc": "4.2.8p9-55.1",
            "ntp": "4.2.8p9-55.1"
        }
    ]
}

SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 / ntp

Package

Name
ntp
Purl
pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.2.8p9-55.1

Ecosystem specific 

{
    "binaries": [
        {
            "ntp-doc": "4.2.8p9-55.1",
            "ntp": "4.2.8p9-55.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP1 / ntp

Package

Name
ntp
Purl
pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.2.8p9-55.1

Ecosystem specific 

{
    "binaries": [
        {
            "ntp-doc": "4.2.8p9-55.1",
            "ntp": "4.2.8p9-55.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP1 / ntp

Package

Name
ntp
Purl
pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.2.8p9-55.1

Ecosystem specific 

{
    "binaries": [
        {
            "ntp-doc": "4.2.8p9-55.1",
            "ntp": "4.2.8p9-55.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2 / ntp

Package

Name
ntp
Purl
pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.2.8p9-55.1

Ecosystem specific 

{
    "binaries": [
        {
            "ntp-doc": "4.2.8p9-55.1",
            "ntp": "4.2.8p9-55.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP2 / ntp

Package

Name
ntp
Purl
pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.2.8p9-55.1

Ecosystem specific 

{
    "binaries": [
        {
            "ntp-doc": "4.2.8p9-55.1",
            "ntp": "4.2.8p9-55.1"
        }
    ]
}