https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:48:24 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-21024 cnvd-2017-21024 https://cve.radiocsirt.org/vuln/cnvd-2017-21024 https://cve.radiocsirt.org/vuln/euvd-2026-91867 EUVD-2026-91867 https://cve.radiocsirt.org/vuln/euvd-2026-91867 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3405 <p>ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 keys via a brute force attack with the 93 possible keys.</p> <p>ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 keys via a brute force attack with the 93 possible keys.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-3405 https://cve.radiocsirt.org/vuln/ghsa-wwx9-mwhp-g8mc <p>ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 keys via a brute force attack with the 93 possible keys.</p> <p>ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 keys via a brute force attack with the 93 possible keys.</p> https://cve.radiocsirt.org/vuln/ghsa-wwx9-mwhp-g8mc https://cve.radiocsirt.org/vuln/gsd-2015-3405 gsd-2015-3405 https://cve.radiocsirt.org/vuln/gsd-2015-3405 https://cve.radiocsirt.org/vuln/rhsa-2015:1459 <p>ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: ntpd accepts unauthenticated packets with symmetric key crypto ntp: authentication doesn&#39;t protect symmetric associations against DoS attacks ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems</p> <p>ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: ntpd accepts unauthenticated packets with symmetric key crypto ntp: authentication doesn&#39;t protect symmetric associations against DoS attacks ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1459 https://cve.radiocsirt.org/vuln/rhsa-2015:2231 <p>ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: ntpd accepts unauthenticated packets with symmetric key crypto ntp: authentication doesn&#39;t protect symmetric associations against DoS attacks ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems</p> <p>ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: ntpd accepts unauthenticated packets with symmetric key crypto ntp: authentication doesn&#39;t protect symmetric associations against DoS attacks ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems</p> https://cve.radiocsirt.org/vuln/rhsa-2015:2231 https://cve.radiocsirt.org/vuln/suse-su-2015:0259-1 <p>Recommended update for ntp</p> <p>Recommended update for ntp</p> https://cve.radiocsirt.org/vuln/suse-su-2015:0259-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3405 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ntp</p> <p>ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 keys via a brute force attack with the 93 possible keys.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ntp</p> <p>ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 keys via a brute force attack with the 93 possible keys.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3405