Oval Definition:	oval:org.mitre.oval:def:28304
Revision Date: 2015-02-23 Version: 10 Title: ELSA-2014-2024 -- ntp security update (important) Description: [4.2.6p5-2]- don't generate weak control key for resolver (CVE-2014-9293)- don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)- fix buffer overflows via specially-crafted packets (CVE-2014-9295)- don't mobilize passive association when authentication fails (CVE-2014-9296) Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2014-9293 CVE-2014-9294 CVE-2014-9295 CVE-2014-9296 ELSA-2014-2024 Platform(s): Oracle Linux 6 Oracle Linux 7 Product(s): ntp Definition Synopsis Oracle Linux 6 release section Oracle Linux 6.x AND Packages match section ntp is earlier than 0:4.2.6p5-2.el6_6 OR ntp-doc is earlier than 0:4.2.6p5-2.el6_6 OR ntp-perl is earlier than 0:4.2.6p5-2.el6_6 OR ntpdate is earlier than 0:4.2.6p5-2.el6_6 Oracle Linux 7 release section Oracle Linux 7.x AND Packages match section ntp is earlier than 0:4.2.6p5-19.el7_0 OR ntp-doc is earlier than 0:4.2.6p5-19.el7_0 OR ntp-perl is earlier than 0:4.2.6p5-19.el7_0 OR ntpdate is earlier than 0:4.2.6p5-19.el7_0 OR sntp is earlier than 0:4.2.6p5-19.el7_0
BACK