Test ID:	1.3.6.1.4.1.25623.1.1.4.2016.2094.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2016:2094-1)
Summary:	The remote host is missing an update for the 'yast2-ntp-client' package(s) announced via the SUSE-SU-2016:2094-1 advisory.
Description:	Summary: The remote host is missing an update for the 'yast2-ntp-client' package(s) announced via the SUSE-SU-2016:2094-1 advisory. Vulnerability Insight: The YaST2 NTP Client was updated to handle the presence of both xntp and ntp packages. If none are installed, 'ntp' will be installed. Security Issues: CVE-2016-4953 CVE-2016-4954 CVE-2016-4955 CVE-2016-4956 CVE-2016-4957 CVE-2016-1547 CVE-2016-1548 CVE-2016-1549 CVE-2016-1550 CVE-2016-1551 CVE-2016-2516 CVE-2016-2517 CVE-2016-2518 CVE-2016-2519 CVE-2015-8158 CVE-2015-8138 CVE-2015-7979 CVE-2015-7978 CVE-2015-7977 CVE-2015-7976 CVE-2015-7975 CVE-2015-7974 CVE-2015-7973 CVE-2015-5300 CVE-2015-5194 CVE-2015-7871 CVE-2015-7855 CVE-2015-7854 CVE-2015-7853 CVE-2015-7852 CVE-2015-7851 CVE-2015-7850 CVE-2015-7849 CVE-2015-7848 CVE-2015-7701 CVE-2015-7703 CVE-2015-7704 CVE-2015-7705 CVE-2015-7691 CVE-2015-7692 CVE-2015-7702 CVE-2015-1798 CVE-2015-1799 Affected Software/OS: 'yast2-ntp-client' package(s) on SUSE Linux Enterprise Server 10 SP4. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1798 http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html BugTraq ID: 73951 http://www.securityfocus.com/bid/73951 CERT/CC vulnerability note: VU#374268 http://www.kb.cert.org/vuls/id/374268 Cisco Security Advisory: 20150408 Multiple Vulnerabilities in ntpd (April 2015) Affecting Cisco Products http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd Cisco Security Advisory: 20150408 Network Time Protocol Daemon MAC Checking Failure Authentication Bypass Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=38276 Debian Security Information: DSA-3223 (Google Search) http://www.debian.org/security/2015/dsa-3223 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html https://security.gentoo.org/glsa/201509-01 HPdes Security Advisory: HPSBUX03333 http://marc.info/?l=bugtraq&m=143213867103400&w=2 HPdes Security Advisory: SSRT102029 http://www.mandriva.com/security/advisories?name=MDVSA-2015:202 RedHat Security Advisories: RHSA-2015:1459 http://rhn.redhat.com/errata/RHSA-2015-1459.html http://www.securitytracker.com/id/1032032 SuSE Security Announcement: openSUSE-SU-2015:0775 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html http://www.ubuntu.com/usn/USN-2567-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-1799 BugTraq ID: 73950 http://www.securityfocus.com/bid/73950 Cisco Security Advisory: 20150408 Network Time Protocol Daemon Symmetric Mode Packet Processing Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=38275 Debian Security Information: DSA-3222 (Google Search) http://www.debian.org/security/2015/dsa-3222 HPdes Security Advisory: HPSBHF03557 http://marc.info/?l=bugtraq&m=145750740530849&w=2 http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html http://www.securitytracker.com/id/1032031 Common Vulnerability Exposure (CVE) ID: CVE-2015-5194 BugTraq ID: 76475 http://www.securityfocus.com/bid/76475 Debian Security Information: DSA-3388 (Google Search) http://www.debian.org/security/2015/dsa-3388 http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.html http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html http://www.openwall.com/lists/oss-security/2015/08/25/3 RedHat Security Advisories: RHSA-2016:0780 http://rhn.redhat.com/errata/RHSA-2016-0780.html RedHat Security Advisories: RHSA-2016:2583 http://rhn.redhat.com/errata/RHSA-2016-2583.html SuSE Security Announcement: SUSE-SU:2016:1311 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html SuSE Security Announcement: SUSE-SU:2016:1912 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html SuSE Security Announcement: SUSE-SU:2016:2094 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html http://www.ubuntu.com/usn/USN-2783-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-5300 BugTraq ID: 77312 http://www.securityfocus.com/bid/77312 http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170684.html http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.html FreeBSD Security Advisory: FreeBSD-SA-16:24 https://www.freebsd.org/security/advisories/FreeBSD-SA-16:02.ntp.asc https://ics-cert.us-cert.gov/advisories/ICSA-15-356-01 https://www.cs.bu.edu/~goldbe/NTPattack.html http://seclists.org/bugtraq/2016/Feb/164 RedHat Security Advisories: RHSA-2015:1930 http://rhn.redhat.com/errata/RHSA-2015-1930.html http://www.securitytracker.com/id/1034670 SuSE Security Announcement: SUSE-SU:2016:1175 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html SuSE Security Announcement: SUSE-SU:2016:1177 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html SuSE Security Announcement: SUSE-SU:2016:1247 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html SuSE Security Announcement: openSUSE-SU:2016:1292 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html SuSE Security Announcement: openSUSE-SU:2016:1423 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html Common Vulnerability Exposure (CVE) ID: CVE-2015-7691 BugTraq ID: 77274 http://www.securityfocus.com/bid/77274 https://security.gentoo.org/glsa/201607-15 http://www.securitytracker.com/id/1033951 Common Vulnerability Exposure (CVE) ID: CVE-2015-7692 BugTraq ID: 77285 http://www.securityfocus.com/bid/77285 Common Vulnerability Exposure (CVE) ID: CVE-2015-7701 BugTraq ID: 77281 http://www.securityfocus.com/bid/77281 Common Vulnerability Exposure (CVE) ID: CVE-2015-7702 BugTraq ID: 77286 http://www.securityfocus.com/bid/77286 Common Vulnerability Exposure (CVE) ID: CVE-2015-7703 BugTraq ID: 77278 http://www.securityfocus.com/bid/77278 Common Vulnerability Exposure (CVE) ID: CVE-2015-7704 BugTraq ID: 77280 http://www.securityfocus.com/bid/77280 CERT/CC vulnerability note: VU#718152 https://www.kb.cert.org/vuls/id/718152 https://eprint.iacr.org/2015/1020.pdf RedHat Security Advisories: RHSA-2015:2520 http://rhn.redhat.com/errata/RHSA-2015-2520.html Common Vulnerability Exposure (CVE) ID: CVE-2015-7705 BugTraq ID: 77284 http://www.securityfocus.com/bid/77284 Bugtraq: 20151022 Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015 (Google Search) http://www.securityfocus.com/archive/1/536737/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded Bugtraq: 20151029 [slackware-security] ntp (SSA:2015-302-03) (Google Search) http://www.securityfocus.com/archive/1/536796/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded Cisco Security Advisory: 20151021 Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11 SuSE Security Announcement: SUSE-SU-2016:1247 (Google Search) SuSE Security Announcement: SUSE-SU-2016:1278 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html SuSE Security Announcement: SUSE-SU-2016:1291 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html SuSE Security Announcement: SUSE-SU-2016:1311 (Google Search) SuSE Security Announcement: SUSE-SU-2016:1471 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html SuSE Security Announcement: SUSE-SU-2016:1568 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html SuSE Security Announcement: SUSE-SU-2016:1912 (Google Search) SuSE Security Announcement: SUSE-SU-2016:2094 (Google Search) SuSE Security Announcement: openSUSE-SU-2015:2016 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html SuSE Security Announcement: openSUSE-SU-2016:1329 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html SuSE Security Announcement: openSUSE-SU-2016:1423 (Google Search) Common Vulnerability Exposure (CVE) ID: CVE-2015-7848 BugTraq ID: 77275 http://www.securityfocus.com/bid/77275 http://www.talosintelligence.com/reports/TALOS-2015-0052/ Common Vulnerability Exposure (CVE) ID: CVE-2015-7849 BugTraq ID: 77276 http://www.securityfocus.com/bid/77276 Common Vulnerability Exposure (CVE) ID: CVE-2015-7850 BugTraq ID: 77279 http://www.securityfocus.com/bid/77279 Common Vulnerability Exposure (CVE) ID: CVE-2015-7851 http://support.ntp.org/bin/view/Main/NtpBug2918 http://support.ntp.org/bin/view/Main/SecurityNotice http://www.talosintel.com/reports/TALOS-2015-0062/ Common Vulnerability Exposure (CVE) ID: CVE-2015-7852 BugTraq ID: 77288 http://www.securityfocus.com/bid/77288 Common Vulnerability Exposure (CVE) ID: CVE-2015-7853 BugTraq ID: 77273 http://www.securityfocus.com/bid/77273 Bugtraq: 20151026 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp (Google Search) http://www.securityfocus.com/archive/1/536760/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/536760/100/100/threaded Bugtraq: 20151104 FreeBSD Security Advisory FreeBSD-SA-15:25.ntp [REVISED] (Google Search) http://www.securityfocus.com/archive/1/536833/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/536833/100/100/threaded http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html http://www.talosintel.com/vulnerability-reports/ Common Vulnerability Exposure (CVE) ID: CVE-2015-7854 BugTraq ID: 77277 http://www.securityfocus.com/bid/77277 Common Vulnerability Exposure (CVE) ID: CVE-2015-7855 BugTraq ID: 77283 http://www.securityfocus.com/bid/77283 https://www.exploit-db.com/exploits/40840/ Common Vulnerability Exposure (CVE) ID: CVE-2015-7871 BugTraq ID: 77287 http://www.securityfocus.com/bid/77287 https://security.gentoo.org/glsa/201604-03 Common Vulnerability Exposure (CVE) ID: CVE-2015-7973 BugTraq ID: 81963 http://www.securityfocus.com/bid/81963 Cisco Security Advisory: 20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc http://www.securitytracker.com/id/1034782 SuSE Security Announcement: SUSE-SU-2016:1175 (Google Search) SuSE Security Announcement: SUSE-SU-2016:1177 (Google Search) SuSE Security Announcement: openSUSE-SU-2016:1292 (Google Search) http://www.ubuntu.com/usn/USN-3096-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-7974 BugTraq ID: 81960 http://www.securityfocus.com/bid/81960 Debian Security Information: DSA-3629 (Google Search) http://www.debian.org/security/2016/dsa-3629 http://www.talosintel.com/reports/TALOS-2016-0071/ Common Vulnerability Exposure (CVE) ID: CVE-2015-7975 BugTraq ID: 81959 http://www.securityfocus.com/bid/81959 Common Vulnerability Exposure (CVE) ID: CVE-2015-7976 Common Vulnerability Exposure (CVE) ID: CVE-2015-7977 BugTraq ID: 81815 http://www.securityfocus.com/bid/81815 http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176434.html Common Vulnerability Exposure (CVE) ID: CVE-2015-7978 BugTraq ID: 81962 http://www.securityfocus.com/bid/81962 Common Vulnerability Exposure (CVE) ID: CVE-2015-7979 BugTraq ID: 81816 http://www.securityfocus.com/bid/81816 RedHat Security Advisories: RHSA-2016:1141 https://access.redhat.com/errata/RHSA-2016:1141 RedHat Security Advisories: RHSA-2016:1552 http://rhn.redhat.com/errata/RHSA-2016-1552.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8138 BugTraq ID: 81811 http://www.securityfocus.com/bid/81811 Cisco Security Advisory: 20160428 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: April 2016 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd Cisco Security Advisory: 20161123 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: November 2016 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161123-ntpd RedHat Security Advisories: RHSA-2016:0063 http://rhn.redhat.com/errata/RHSA-2016-0063.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8158 BugTraq ID: 81814 http://www.securityfocus.com/bid/81814 Common Vulnerability Exposure (CVE) ID: CVE-2016-1547 BugTraq ID: 88276 http://www.securityfocus.com/bid/88276 https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc http://www.talosintelligence.com/reports/TALOS-2016-0081/ http://www.securitytracker.com/id/1035705 Common Vulnerability Exposure (CVE) ID: CVE-2016-1548 BugTraq ID: 88264 http://www.securityfocus.com/bid/88264 Bugtraq: 20160429 [slackware-security] ntp (SSA:2016-120-01) (Google Search) http://www.securityfocus.com/archive/1/538233/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/538233/100/0/threaded https://www.debian.org/security/2016/dsa-3629 http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.html http://packetstormsecurity.com/files/136864/Slackware-Security-Advisory-ntp-Updates.html http://www.talosintelligence.com/reports/TALOS-2016-0082/ https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0082 Common Vulnerability Exposure (CVE) ID: CVE-2016-1549 BugTraq ID: 88200 http://www.securityfocus.com/bid/88200 http://www.talosintelligence.com/reports/TALOS-2016-0083/ Common Vulnerability Exposure (CVE) ID: CVE-2016-1550 BugTraq ID: 88261 http://www.securityfocus.com/bid/88261 http://www.talosintelligence.com/reports/TALOS-2016-0084/ https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0084 Common Vulnerability Exposure (CVE) ID: CVE-2016-1551 BugTraq ID: 88219 http://www.securityfocus.com/bid/88219 http://www.talosintelligence.com/reports/TALOS-2016-0132/ Common Vulnerability Exposure (CVE) ID: CVE-2016-2516 BugTraq ID: 88180 http://www.securityfocus.com/bid/88180 Common Vulnerability Exposure (CVE) ID: CVE-2016-2517 BugTraq ID: 88189 http://www.securityfocus.com/bid/88189 Common Vulnerability Exposure (CVE) ID: CVE-2016-2518 BugTraq ID: 88226 http://www.securityfocus.com/bid/88226 Common Vulnerability Exposure (CVE) ID: CVE-2016-2519 BugTraq ID: 88204 http://www.securityfocus.com/bid/88204 Common Vulnerability Exposure (CVE) ID: CVE-2016-4953 BugTraq ID: 91010 http://www.securityfocus.com/bid/91010 Bugtraq: 20160604 FreeBSD Security Advisory FreeBSD-SA-16:24.ntp (Google Search) http://www.securityfocus.com/archive/1/538600/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/538600/100/0/threaded Bugtraq: 20160604 [slackware-security] ntp (SSA:2016-155-01) (Google Search) http://www.securityfocus.com/archive/1/538599/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/538599/100/0/threaded Bugtraq: 20170607 [security bulletin] HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (DoS) (Google Search) http://www.securityfocus.com/archive/1/540683/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/540683/100/0/threaded CERT/CC vulnerability note: VU#321640 http://www.kb.cert.org/vuls/id/321640 https://www.kb.cert.org/vuls/id/321640 Cisco Security Advisory: 20160603 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: June 2016 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpd https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc http://packetstormsecurity.com/files/137321/Slackware-Security-Advisory-ntp-Updates.html http://packetstormsecurity.com/files/137322/FreeBSD-Security-Advisory-FreeBSD-SA-16-24.ntp.html http://www.securitytracker.com/id/1036037 SuSE Security Announcement: SUSE-SU-2016:1563 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html SuSE Security Announcement: SUSE-SU-2016:1584 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html SuSE Security Announcement: SUSE-SU-2016:1602 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html SuSE Security Announcement: openSUSE-SU-2016:1583 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html SuSE Security Announcement: openSUSE-SU-2016:1636 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html Common Vulnerability Exposure (CVE) ID: CVE-2016-4954 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/ Common Vulnerability Exposure (CVE) ID: CVE-2016-4955 BugTraq ID: 91007 http://www.securityfocus.com/bid/91007 Common Vulnerability Exposure (CVE) ID: CVE-2016-4956 BugTraq ID: 91009 http://www.securityfocus.com/bid/91009 Common Vulnerability Exposure (CVE) ID: CVE-2016-4957
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.