CVE-2016-6301

Name
CVE-2016-6301
Description
The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
secalert@redhat.com http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
secalert@redhat.com http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
secalert@redhat.com http://seclists.org/fulldisclosure/2019/Jun/18
secalert@redhat.com http://seclists.org/fulldisclosure/2019/Sep/7
secalert@redhat.com http://seclists.org/fulldisclosure/2020/Aug/20
secalert@redhat.com http://seclists.org/fulldisclosure/2020/Mar/15
Mailing List http://www.openwall.com/lists/oss-security/2016/08/03/7
Third Party Advisory http://www.securityfocus.com/bid/92277
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1363710
Issue Tracking https://git.busybox.net/busybox/commit/?id=150dc7a2b483b8338a3e185c478b4b23ee884e71
secalert@redhat.com https://seclists.org/bugtraq/2019/Jun/14
secalert@redhat.com https://seclists.org/bugtraq/2019/Sep/7
Third Party Advisory https://security.gentoo.org/glsa/201701-05

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:* busybox >= None < 1.25.1

Vulnerable and fixed packages

Source package Branch Version Maintainer Status