Vulnerability Bulletins |
IBM Security Bulletin: Vulnerability in NTP affects Real-time Compression Appliance (CVE-2014-9295) |
|
| Affected software | IBM |
|
This ntp update fixes the following critical security issue: * A potential remote code execution problem was found inside ntpd. The functions crypto_recv() (when using autokey authentication) and ctl_putdata() where updated to avoid buffer overflows that could have been exploited. CVE(s): CVE-2014-9295 Affected product(s) and affected version(s): Real-time Compression Appliance R3.8 Real-time Compression Appliance R3.9 Refer to the following reference URLs for remediation and More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_ntp_affects_real_time_compression_appliance_cve_2014_9295?lang=en_us |
|