Maple Labs

CVE search · CVE-2014-5209

CVE-2014-5209

medium 5.3

An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
cret@cert.org
Weakness
CWE-200

Severity

VersionScoreVectorSource
CVSS 3.1 medium 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N nvd@nist.govPrimary
CVSS 2.0 medium 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • ntp · ntp
  • f5 · big-ip_access_policy_manager
  • f5 · big-ip_advanced_firewall_manager
  • f5 · big-ip_analytics
  • f5 · big-ip_application_acceleration_manager
  • f5 · big-ip_application_security_manager
  • f5 · big-ip_domain_name_system
  • f5 · big-ip_edge_gateway
  • f5 · big-ip_global_traffic_manager
  • f5 · big-ip_link_controller
  • f5 · big-ip_local_traffic_manager
  • f5 · big-ip_policy_enforcement_manager
  • f5 · big-ip_protocol_security_module
  • f5 · big-ip_wan_optimization_manager
  • f5 · big-ip_webaccelerator
  • f5 · big-iq_adc
  • f5 · big-iq_centralized_management
  • f5 · big-iq_cloud
  • f5 · big-iq_cloud_and_orchestration
  • f5 · big-iq_device
  • f5 · big-iq_security
  • f5 · enterprise_manager
  • f5 · iworkflow
  • f5 · mobilesafe
  • f5 · websafe

References