Multiple Vendors NTP Mode 7 Denial Of Service
危険度: 中
CVE識別番号: CVE-2009-3563
情報公開日: 7 21, 2015
概要
ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.
トレンドマイクロの対策
Apply associated Trend Micro DPI Rules.
対応方法
Trend Micro Deep Security DPI Rule Number: 1003893
Trend Micro Deep Security DPI Rule Name: 1003893 - Multiple Vendors NTP Mode 7 Denial Of Service
影響を受けるソフトウェア
- ntp ntp 4.0.72
- ntp ntp 4.0.73
- ntp ntp 4.0.90
- ntp ntp 4.0.91
- ntp ntp 4.0.92
- ntp ntp 4.0.93
- ntp ntp 4.0.94
- ntp ntp 4.0.95
- ntp ntp 4.0.96
- ntp ntp 4.0.97
- ntp ntp 4.0.98
- ntp ntp 4.0.99
- ntp ntp 4.1.0
- ntp ntp 4.1.2
- ntp ntp 4.2.0
- ntp ntp 4.2.2
- ntp ntp 4.2.2p1
- ntp ntp 4.2.2p2
- ntp ntp 4.2.2p3
- ntp ntp 4.2.2p4
- ntp ntp 4.2.5