Mageia alert MGASA-2018-0195 (ntp)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2018-0195: Updated ntp packages fix security vulnerabilities 
Date:
    	     
 
Sat, 7 Apr 2018 00:55:28 +0200
Message-ID:
    	     
 
<20180406225528.7377C9FE88@duvel.mageia.org>
MGASA-2018-0195 - Updated ntp packages fix security vulnerabilities

Publication date: 06 Apr 2018
URL: https://advisories.mageia.org/MGASA-2018-0195.html
Type: security
Affected Mageia releases: 6
CVE: CVE-2016-1549,
     CVE-2018-7182,
     CVE-2018-7170,
     CVE-2018-7184,
     CVE-2018-7185,
     CVE-2018-7183

Description:
This release addresses five security issues in ntpd for Mageia 6:

LOW/MEDIUM: Sec 3012 / CVE-2016-1549 / VU#961909: Sybil vulnerability:
ephemeral association attack While fixed in ntp-4.2.8p7, there are
significant additional protections for this issue in 4.2.8p11.
Reported by Matt Van Gundy of Cisco.

INFO/MEDIUM: Sec 3412 / CVE-2018-7182 / VU#961909: ctl_getitem(): buffer
read overrun leads to undefined behavior and information leak
Reported by Yihan Lian of Qihoo 360.

LOW: Sec 3415 / CVE-2018-7170 / VU#961909: Multiple authenticated
ephemeral associations. Reported on the questions@ list.

LOW: Sec 3453 / CVE-2018-7184 / VU#961909: Interleaved symmetric mode
cannot recover from bad state. Reported by Miroslav Lichvar of Red Hat.

LOW/MEDIUM: Sec 3454 / CVE-2018-7185 / VU#961909: Unauthenticated packet
can reset authenticated interleaved association.
Reported by Miroslav Lichvar of Red Hat.

one security issue in ntpq:
MEDIUM: Sec 3414 / CVE-2018-7183 / VU#961909: ntpq:decodearr() can write
beyond its buffer limit. Reported by Michael Macnair of Thales-esecurity.com.

and provides over 33 bugfixes and 32 other improvements. ENotification
of these issues were delivered to our Institutional members on a rolling
basis as they were reported and as progress was made.

References:
- https://bugs.mageia.org/show_bug.cgi?id=22850
- http://support.ntp.org/bin/view/Main/SecurityNotice#Recen...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1549
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7182
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7170
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7184
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7185
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7183

SRPMS:
- 6/core/ntp-4.2.8p11-1.mga6