{ "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-3563", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "VU#568372", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/568372" }, { "name": "38832", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/38832" }, { "name": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673", "refsource": "CONFIRM", "url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673" }, { "name": "oval:org.mitre.oval:def:11225", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11225" }, { "name": "http://support.avaya.com/css/P8/documents/100071808", "refsource": "CONFIRM", "url": "http://support.avaya.com/css/P8/documents/100071808" }, { "name": "38794", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/38794" }, { "name": "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates", "refsource": "MLIST", "url": "http://lists.vmware.com/pipermail/security-announce/2010/000082.html" }, { "name": "FEDORA-2009-13121", "refsource": "FEDORA", "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00809.html" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=531213", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=531213" }, { "name": "38764", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/38764" }, { "name": "http://support.ntp.org/bin/view/Main/SecurityNotice#DoS_attack_from_certain_NTP_mode", "refsource": "CONFIRM", "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#DoS_attack_from_certain_NTP_mode" }, { "name": "http://www.kb.cert.org/vuls/id/MAPG-7X7V6J", "refsource": "CONFIRM", "url": "http://www.kb.cert.org/vuls/id/MAPG-7X7V6J" }, { "name": "oval:org.mitre.oval:def:19376", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19376" }, { "name": "37255", "refsource": "BID", "url": "http://www.securityfocus.com/bid/37255" }, { "name": "SSRT101144", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=136482797910018&w=2" }, { "name": "39593", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/39593" }, { "name": "IZ71047", "refsource": "AIXAPAR", "url": "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ71047" }, { "name": "ADV-2010-0993", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2010/0993" }, { "name": "DSA-1948", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2009/dsa-1948" }, { "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560074", "refsource": "CONFIRM", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560074" }, { "name": "http://aix.software.ibm.com/aix/efixes/security/xntpd_advisory.asc", "refsource": "CONFIRM", "url": "http://aix.software.ibm.com/aix/efixes/security/xntpd_advisory.asc" }, { "name": "HPSBUX02639", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=130168580504508&w=2" }, { "name": "1021781", "refsource": "SUNALERT", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021781.1-1" }, { "name": "IZ68659", "refsource": "AIXAPAR", "url": "http://www-01.ibm.com/support/docview.wss?uid=isg1IZ68659" }, { "name": "SSRT100293", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=130168580504508&w=2" }, { "name": "https://support.ntp.org/bugs/show_bug.cgi?id=1331", "refsource": "CONFIRM", "url": "https://support.ntp.org/bugs/show_bug.cgi?id=1331" }, { "name": "oval:org.mitre.oval:def:7076", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7076" }, { "name": "37922", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/37922" }, { "name": "NetBSD-SA2010-005", "refsource": "NETBSD", "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2010-005.txt.asc" }, { "name": "38834", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/38834" }, { "name": "FEDORA-2009-13090", "refsource": "FEDORA", "url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00763.html" }, { "name": "http://security-tracker.debian.org/tracker/CVE-2009-3563", "refsource": "CONFIRM", "url": "http://security-tracker.debian.org/tracker/CVE-2009-3563" }, { "name": "1023298", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1023298" }, { "name": "oval:org.mitre.oval:def:12141", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12141" }, { "name": "RHSA-2009:1651", "refsource": "REDHAT", "url": "https://rhn.redhat.com/errata/RHSA-2009-1651.html" }, { "name": "37629", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/37629" }, { "name": "RHSA-2010:0095", "refsource": "REDHAT", "url": "https://rhn.redhat.com/errata/RHSA-2010-0095.html" }, { "name": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691", "refsource": "CONFIRM", "url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691" }, { "name": "HPSBUX02859", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=136482797910018&w=2" }, { "name": "[announce] 20091208 NTP 4.2.4p8 Released", "refsource": "MLIST", "url": "https://lists.ntp.org/pipermail/announce/2009-December/000086.html" }, { "name": "ADV-2010-0510", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2010/0510" }, { "name": "RHSA-2009:1648", "refsource": "REDHAT", "url": "https://rhn.redhat.com/errata/RHSA-2009-1648.html" }, { "name": "http://www.kb.cert.org/vuls/id/MAPG-7X7VD7", "refsource": "CONFIRM", "url": "http://www.kb.cert.org/vuls/id/MAPG-7X7VD7" }, { "name": "ADV-2010-0528", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2010/0528" }, { "refsource": "CERT-VN", "name": "VU#417980", "url": "https://www.kb.cert.org/vuls/id/417980" } ] } }