CVE-2014-9295 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-9295 Interim 1 37 2023-06-13T01:56:52Z current 2021-05-30T13:24:36Z 2023-06-13T01:56:52Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-9295 Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure function. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00025.html E-Mail link for SUSE-SU-2014:1686-1 https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00031.html E-Mail link for SUSE-SU-2014:1686-2 https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00034.html E-Mail link for SUSE-SU-2014:1686-3 https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00026.html E-Mail link for SUSE-SU-2014:1690-1 https://www.suse.com/support/kb/doc/?id=7010867 E-Mail link for TID7010867 https://www.suse.com/support/kb/doc?id=7016020 E-Mail link for TID7016020 https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00020.html E-Mail link for openSUSE-SU-2014:1670-1 https://lists.opensuse.org/opensuse-security-announce/2014-12/msg00024.html E-Mail link for openSUSE-SU-2014:1680-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.5 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Legacy 15 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Legacy 15 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Module for Legacy 15 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE OpenStack Cloud 6 openSUSE Tumbleweed ntp ntp-4.2.4p8-1.28.1 ntp-4.2.6p5-31.1 ntp-4.2.8p10-63.3 ntp-4.2.8p11-2.12 ntp-4.2.8p12-64.8.2 ntp-4.2.8p13-4.6.1 ntp-4.2.8p13-85.1 ntp-4.2.8p15-150000.4.22.1 ntp-4.2.8p15-4.13.1 ntp-4.2.8p15-4.19.1 ntp-4.2.8p2-2.18 ntp-4.2.8p4-1.3 ntp-4.2.8p8-14.1 ntp-4.2.8p9-1.1 ntp-doc ntp-doc-4.2.4p8-1.28.1 ntp-doc-4.2.6p5-31.1 ntp-doc-4.2.8p10-63.3 ntp-doc-4.2.8p12-64.8.2 ntp-doc-4.2.8p13-85.1 ntp-doc-4.2.8p2-2.18 ntp-doc-4.2.8p4-1.3 ntp-doc-4.2.8p8-14.1 ntp-doc-4.2.8p9-1.1 ntp-4.2.4p8-1.28.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 ntp-doc-4.2.4p8-1.28.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 ntp-4.2.6p5-31.1 as a component of SUSE Linux Enterprise Desktop 12 ntp-doc-4.2.6p5-31.1 as a component of SUSE Linux Enterprise Desktop 12 ntp-4.2.8p4-1.3 as a component of SUSE Linux Enterprise Desktop 12 SP1 ntp-doc-4.2.8p4-1.3 as a component of SUSE Linux Enterprise Desktop 12 SP1 ntp-4.2.8p8-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 ntp-doc-4.2.8p8-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 ntp-4.2.8p10-63.3 as a component of SUSE Linux Enterprise Desktop 12 SP3 ntp-doc-4.2.8p10-63.3 as a component of SUSE Linux Enterprise Desktop 12 SP3 ntp-4.2.8p12-64.8.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 ntp-doc-4.2.8p12-64.8.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 ntp-4.2.8p13-85.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 ntp-doc-4.2.8p13-85.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 ntp-4.2.8p11-2.12 as a component of SUSE Linux Enterprise Module for Legacy 15 ntp-4.2.8p13-4.6.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP1 ntp-4.2.8p13-4.6.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP2 ntp-4.2.8p15-4.13.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP3 ntp-4.2.8p15-4.19.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP4 ntp-4.2.8p15-150000.4.22.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP5 ntp-4.2.4p8-1.28.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS ntp-doc-4.2.4p8-1.28.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS ntp-4.2.4p8-1.28.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA ntp-doc-4.2.4p8-1.28.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA ntp-4.2.4p8-1.28.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS ntp-doc-4.2.4p8-1.28.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS ntp-4.2.4p8-1.28.1 as a component of SUSE Linux Enterprise Server 11 SP3 ntp-doc-4.2.4p8-1.28.1 as a component of SUSE Linux Enterprise Server 11 SP3 ntp-4.2.4p8-1.28.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA ntp-doc-4.2.4p8-1.28.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA ntp-4.2.8p2-2.18 as a component of SUSE Linux Enterprise Server 11 SP4 ntp-doc-4.2.8p2-2.18 as a component of SUSE Linux Enterprise Server 11 SP4 ntp-4.2.6p5-31.1 as a component of SUSE Linux Enterprise Server 12 ntp-doc-4.2.6p5-31.1 as a component of SUSE Linux Enterprise Server 12 ntp-4.2.8p4-1.3 as a component of SUSE Linux Enterprise Server 12 SP1 ntp-doc-4.2.8p4-1.3 as a component of SUSE Linux Enterprise Server 12 SP1 ntp-4.2.8p8-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 ntp-doc-4.2.8p8-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 ntp-4.2.8p10-63.3 as a component of SUSE Linux Enterprise Server 12 SP3 ntp-doc-4.2.8p10-63.3 as a component of SUSE Linux Enterprise Server 12 SP3 ntp-4.2.8p12-64.8.2 as a component of SUSE Linux Enterprise Server 12 SP4 ntp-doc-4.2.8p12-64.8.2 as a component of SUSE Linux Enterprise Server 12 SP4 ntp-4.2.8p13-85.1 as a component of SUSE Linux Enterprise Server 12 SP5 ntp-doc-4.2.8p13-85.1 as a component of SUSE Linux Enterprise Server 12 SP5 ntp-4.2.8p8-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 ntp-doc-4.2.8p8-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 ntp-4.2.4p8-1.28.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 ntp-doc-4.2.4p8-1.28.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 ntp-4.2.6p5-31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 ntp-doc-4.2.6p5-31.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 ntp-4.2.8p4-1.3 as a component of SUSE OpenStack Cloud 6 ntp-4.2.8p9-1.1 as a component of openSUSE Tumbleweed ntp-doc-4.2.8p9-1.1 as a component of openSUSE Tumbleweed ntp as a component of SUSE CaaS Platform 4.5 ntp as a component of SUSE Enterprise Storage 7 ntp as a component of SUSE Linux Enterprise Module for Legacy 15 SP3 ntp as a component of SUSE Linux Enterprise Server 11 SP4 LTSS ntp as a component of SUSE Linux Enterprise Server 11 SP4-LTSS ntp-doc as a component of SUSE Linux Enterprise Server 11 SP4-LTSS ntp as a component of SUSE Linux Enterprise Server 12 SP2-BCL ntp-doc as a component of SUSE Linux Enterprise Server 12 SP2-BCL ntp as a component of SUSE Linux Enterprise Server 12 SP3-BCL ntp-doc as a component of SUSE Linux Enterprise Server 12 SP3-BCL ntp as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ntp-doc as a component of SUSE Linux Enterprise Server 12 SP4-LTSS ntp as a component of SUSE Linux Enterprise Server 15 SP2-LTSS ntp as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 ntp as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 ntp-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 ntp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 ntp as a component of SUSE Manager Proxy 4.1 ntp as a component of SUSE Manager Retail Branch Server 4.1 ntp as a component of SUSE Manager Server 4.1 Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure function. CVE-2014-9295 SUSE Linux Enterprise Desktop 11 SP3:ntp-4.2.4p8-1.28.1 SUSE Linux Enterprise Desktop 11 SP3:ntp-doc-4.2.4p8-1.28.1 SUSE Linux Enterprise Desktop 12:ntp-4.2.6p5-31.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.6p5-31.1 SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p4-1.3 SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p4-1.3 SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p8-14.1 SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p8-14.1 SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p10-63.3 SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p10-63.3 SUSE Linux Enterprise Desktop 12 SP4:ntp-4.2.8p12-64.8.2 SUSE Linux Enterprise Desktop 12 SP4:ntp-doc-4.2.8p12-64.8.2 SUSE Linux Enterprise High Performance Computing 12 SP5:ntp-4.2.8p13-85.1 SUSE Linux Enterprise High Performance Computing 12 SP5:ntp-doc-4.2.8p13-85.1 SUSE Linux Enterprise Module for Legacy 15:ntp-4.2.8p11-2.12 SUSE Linux Enterprise Module for Legacy 15 SP1:ntp-4.2.8p13-4.6.1 SUSE Linux Enterprise Module for Legacy 15 SP2:ntp-4.2.8p13-4.6.1 SUSE Linux Enterprise Module for Legacy 15 SP3:ntp-4.2.8p15-4.13.1 SUSE Linux Enterprise Module for Legacy 15 SP4:ntp-4.2.8p15-4.19.1 SUSE Linux Enterprise Module for Legacy 15 SP5:ntp-4.2.8p15-150000.4.22.1 SUSE Linux Enterprise Server 11 SP1-LTSS:ntp-4.2.4p8-1.28.1 SUSE Linux Enterprise Server 11 SP1-LTSS:ntp-doc-4.2.4p8-1.28.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:ntp-4.2.4p8-1.28.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:ntp-doc-4.2.4p8-1.28.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.4p8-1.28.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.4p8-1.28.1 SUSE Linux Enterprise Server 11 SP3:ntp-4.2.4p8-1.28.1 SUSE Linux Enterprise Server 11 SP3:ntp-doc-4.2.4p8-1.28.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.4p8-1.28.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.4p8-1.28.1 SUSE Linux Enterprise Server 11 SP4:ntp-4.2.8p2-2.18 SUSE Linux Enterprise Server 11 SP4:ntp-doc-4.2.8p2-2.18 SUSE Linux Enterprise Server 12:ntp-4.2.6p5-31.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-31.1 SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p4-1.3 SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p4-1.3 SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p8-14.1 SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p8-14.1 SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p10-63.3 SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p10-63.3 SUSE Linux Enterprise Server 12 SP4:ntp-4.2.8p12-64.8.2 SUSE Linux Enterprise Server 12 SP4:ntp-doc-4.2.8p12-64.8.2 SUSE Linux Enterprise Server 12 SP5:ntp-4.2.8p13-85.1 SUSE Linux Enterprise Server 12 SP5:ntp-doc-4.2.8p13-85.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p8-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p8-14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:ntp-4.2.4p8-1.28.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:ntp-doc-4.2.4p8-1.28.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-31.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-31.1 SUSE OpenStack Cloud 6:ntp-4.2.8p4-1.3 openSUSE Tumbleweed:ntp-4.2.8p9-1.1 openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1 SUSE CaaS Platform 4.5:ntp SUSE Enterprise Storage 7:ntp SUSE Linux Enterprise Module for Legacy 15 SP3:ntp SUSE Linux Enterprise Server 11 SP4 LTSS:ntp SUSE Linux Enterprise Server 11 SP4-LTSS:ntp SUSE Linux Enterprise Server 11 SP4-LTSS:ntp-doc SUSE Linux Enterprise Server 12 SP2-BCL:ntp SUSE Linux Enterprise Server 12 SP2-BCL:ntp-doc SUSE Linux Enterprise Server 12 SP3-BCL:ntp SUSE Linux Enterprise Server 12 SP3-BCL:ntp-doc SUSE Linux Enterprise Server 12 SP4-LTSS:ntp SUSE Linux Enterprise Server 12 SP4-LTSS:ntp-doc SUSE Linux Enterprise Server 15 SP2-LTSS:ntp SUSE Linux Enterprise Server Business Critical Linux 15 SP1:ntp SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp SUSE Linux Enterprise Server for SAP Applications 12 SP3:ntp-doc SUSE Linux Enterprise Server for SAP Applications 15 SP2:ntp SUSE Manager Proxy 4.1:ntp SUSE Manager Retail Branch Server 4.1:ntp SUSE Manager Server 4.1:ntp important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P