ntp-debuginfo vulnerabilities

Known vulnerabilities in the ntp-debuginfo package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Improper Input Validation	<0:4.2.8p11-1.37.amzn1
M NULL Pointer Dereference	<0:4.2.8p12-1.41.amzn1
L Out-of-bounds Write	<0:4.2.8p12-1.39.amzn1
L CVE-2018-7170	<0:4.2.8p12-1.39.amzn1
M CVE-2018-7184	<0:4.2.8p11-1.37.amzn1
M Out-of-bounds Read	<0:4.2.8p11-1.37.amzn1
M CVE-2018-7170	<0:4.2.8p11-1.37.amzn1
M Out-of-bounds Write	<0:4.2.8p11-1.37.amzn1
M CVE-2018-7185	<0:4.2.8p11-1.37.amzn1
M Improper Data Handling	<0:4.2.8p11-1.37.amzn1
M Out-of-Bounds	<0:4.2.6p5-44.34.amzn1
M Out-of-bounds Write	<0:4.2.6p5-44.34.amzn1
M Out-of-Bounds	<0:4.2.6p5-44.34.amzn1
M Improper Input Validation	<0:4.2.6p5-44.34.amzn1
M Improper Input Validation	<0:4.2.6p5-44.34.amzn1
M Source Code	<0:4.2.6p5-43.33.amzn1
M NULL Pointer Dereference	<0:4.2.6p5-43.33.amzn1
M Resource Exhaustion	<0:4.2.6p5-43.33.amzn1
M Incorrect Calculation	<0:4.2.6p5-43.33.amzn1
M Resource Exhaustion	<0:4.2.6p5-43.33.amzn1
M Race Condition	<0:4.2.6p5-41.32.amzn1
M CVE-2016-4956	<0:4.2.6p5-41.32.amzn1
M Race Condition	<0:4.2.6p5-41.32.amzn1
M Improper Access Control	<0:4.2.6p5-41.32.amzn1
M Out-of-bounds Read	<0:4.2.6p5-40.30.amzn1
M Improper Input Validation	<0:4.2.6p5-40.30.amzn1
M Information Exposure	<0:4.2.6p5-40.30.amzn1
M Improper Data Handling	<0:4.2.6p5-40.30.amzn1
H CVE-2015-8158	<0:4.2.6p5-36.29.amzn1
H Improper Authentication	<0:4.2.6p5-36.29.amzn1
H Improper Input Validation	<0:4.2.6p5-36.29.amzn1
H Resource Exhaustion	<0:4.2.6p5-36.29.amzn1
H Improper Data Handling	<0:4.2.6p5-36.29.amzn1
H Improper Authentication	<0:4.2.6p5-36.29.amzn1
H NULL Pointer Dereference	<0:4.2.6p5-36.29.amzn1
H Improper Input Validation	<0:4.2.6p5-34.27.amzn1
H Improper Input Validation	<0:4.2.6p5-34.27.amzn1
H Improper Authentication	<0:4.2.6p5-34.27.amzn1
H Improper Input Validation	<0:4.2.6p5-34.27.amzn1
H Improper Input Validation	<0:4.2.6p5-34.27.amzn1
H Improper Input Validation	<0:4.2.6p5-34.27.amzn1
H Missing Release of Resource after Effective Lifetime	<0:4.2.6p5-34.27.amzn1
H Time and State	<0:4.2.6p5-34.27.amzn1
L Improper Input Validation	<0:4.2.6p5-33.26.amzn1
L Improper Input Validation	<0:4.2.6p5-33.26.amzn1
L Incorrect Type Conversion or Cast	<0:4.2.6p5-33.26.amzn1
L Improper Input Validation	<0:4.2.6p5-33.26.amzn1
L Insufficient Entropy	<0:4.2.6p5-33.26.amzn1
L Improper Input Validation	<0:4.2.6p5-33.26.amzn1
H Code	<0:4.2.6p5-30.24.amzn1
H Code	<0:4.2.6p5-30.24.amzn1
M CVE-2014-9298	<0:4.2.6p5-27.23.amzn1
M CVE-2014-9297	<0:4.2.6p5-27.23.amzn1
H CVE-2014-9294	<0:4.2.6p5-2.22.amzn1
H Code	<0:4.2.6p5-2.22.amzn1
H Out-of-Bounds	<0:4.2.6p5-2.22.amzn1
H CVE-2014-9293	<0:4.2.6p5-2.22.amzn1

Vulnerability

Vulnerable Version

Improper Input Validation

<0:4.2.8p11-1.37.amzn1

NULL Pointer Dereference

<0:4.2.8p12-1.41.amzn1

Out-of-bounds Write

<0:4.2.8p12-1.39.amzn1

CVE-2018-7170

<0:4.2.8p12-1.39.amzn1

CVE-2018-7184

<0:4.2.8p11-1.37.amzn1