CVE-2014-5209 An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.
MediumCVSS 5.3
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ntp(Debian:11) | < 1:4.2.8p3+dfsg-1 | 1:4.2.8p3+dfsg-1 |
| ntp | = 4.2.7-p25 | No fix listed |
| f5 big-ip access policy manager | >= 10.2.1, <= 10.2.4 | No fix listed |
| f5 big-ip access policy manager | >= 11.4.0, <= 11.6.4 | No fix listed |
| f5 big-ip access policy manager | >= 12.0.0, <= 12.1.4 | No fix listed |
| f5 big-ip access policy manager | >= 13.0.0, <= 13.1.1 | No fix listed |
| f5 big-ip access policy manager | >= 14.0.0, <= 14.1.0 | No fix listed |
| f5 big-ip access policy manager | = 11.2.1 | No fix listed |
| f5 big-ip access policy manager | = 15.0.0 | No fix listed |
| f5 big-ip advanced firewall manager | >= 11.4.0, <= 11.6.4 | No fix listed |
| f5 big-ip advanced firewall manager | >= 12.0.0, <= 12.1.4 | No fix listed |
| f5 big-ip advanced firewall manager | >= 13.0.0, <= 13.1.1 | No fix listed |
| f5 big-ip advanced firewall manager | >= 14.0.0, <= 14.1.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 15.0.0 | No fix listed |
| f5 big-ip analytics | >= 11.4.0, <= 11.6.4 | No fix listed |
| f5 big-ip analytics | >= 12.0.0, <= 12.1.4 | No fix listed |
| f5 big-ip analytics | >= 13.0.0, <= 13.1.1 | No fix listed |
| f5 big-ip analytics | >= 14.0.0, <= 14.1.0 | No fix listed |
| f5 big-ip analytics | = 11.2.1 | No fix listed |
| f5 big-ip analytics | = 15.0.0 | No fix listed |
| f5 big-ip application acceleration manager | >= 11.4.0, <= 11.6.4 | No fix listed |
| f5 big-ip application acceleration manager | >= 12.0.0, <= 12.1.4 | No fix listed |
| f5 big-ip application acceleration manager | >= 13.0.0, <= 13.1.1 | No fix listed |
| f5 big-ip application acceleration manager | >= 14.0.0, <= 14.1.0 | No fix listed |
| f5 big-ip application acceleration manager | = 15.0.0 | No fix listed |
Show 54 more
| Product | Affected versions | Fixed in |
|---|---|---|
| f5 big-ip application security manager | >= 10.2.1, <= 10.2.4 | No fix listed |
| f5 big-ip application security manager | >= 11.4.0, <= 11.6.4 | No fix listed |
| f5 big-ip application security manager | >= 12.0.0, <= 12.1.4 | No fix listed |
| f5 big-ip application security manager | >= 13.0.0, <= 13.1.1 | No fix listed |
| f5 big-ip application security manager | >= 14.0.0, <= 14.1.0 | No fix listed |
| f5 big-ip application security manager | = 11.2.1 | No fix listed |
| f5 big-ip application security manager | = 15.0.0 | No fix listed |
| f5 big-ip domain name system | >= 12.0.0, <= 12.1.4 | No fix listed |
| f5 big-ip domain name system | >= 13.0.0, <= 13.1.1 | No fix listed |
| f5 big-ip domain name system | >= 14.0.0, <= 14.1.0 | No fix listed |
| f5 big-ip domain name system | = 15.0.0 | No fix listed |
| f5 big-ip edge gateway | >= 10.2.1, <= 10.2.4 | No fix listed |
| f5 big-ip edge gateway | = 11.2.1 | No fix listed |
| f5 big-ip global traffic manager | >= 10.2.1, <= 10.2.4 | No fix listed |
| f5 big-ip global traffic manager | >= 11.4.0, <= 11.6.4 | No fix listed |
| f5 big-ip global traffic manager | = 11.2.1 | No fix listed |
| f5 big-ip link controller | >= 10.2.1, <= 10.2.4 | No fix listed |
| f5 big-ip link controller | >= 11.4.0, <= 11.6.4 | No fix listed |
| f5 big-ip link controller | >= 12.0.0, <= 12.1.4 | No fix listed |
| f5 big-ip link controller | >= 13.0.0, <= 13.1.1 | No fix listed |
| f5 big-ip link controller | >= 14.0.0, <= 14.1.0 | No fix listed |
| f5 big-ip link controller | = 11.2.1 | No fix listed |
| f5 big-ip link controller | = 15.0.0 | No fix listed |
| f5 big-ip local traffic manager | >= 10.2.1, <= 10.2.4 | No fix listed |
| f5 big-ip local traffic manager | >= 11.4.0, <= 11.6.4 | No fix listed |
| f5 big-ip local traffic manager | >= 12.0.0, <= 12.1.4 | No fix listed |
| f5 big-ip local traffic manager | >= 13.0.0, <= 13.1.1 | No fix listed |
| f5 big-ip local traffic manager | >= 14.0.0, <= 14.1.0 | No fix listed |
| f5 big-ip local traffic manager | = 11.2.1 | No fix listed |
| f5 big-ip local traffic manager | = 15.0.0 | No fix listed |
| f5 big-ip policy enforcement manager | >= 11.4.0, <= 11.6.4 | No fix listed |
| f5 big-ip policy enforcement manager | >= 12.0.0, <= 12.1.4 | No fix listed |
| f5 big-ip policy enforcement manager | >= 13.0.0, <= 13.1.1 | No fix listed |
| f5 big-ip policy enforcement manager | >= 14.0.0, <= 14.1.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 15.0.0 | No fix listed |
| f5 big-ip protocol security module | >= 10.2.1, <= 10.2.4 | No fix listed |
| f5 big-ip protocol security module | >= 11.4.0, <= 11.4.1 | No fix listed |
| f5 big-ip wan optimization manager | >= 10.2.1, <= 10.2.4 | No fix listed |
| f5 big-ip wan optimization manager | = 11.2.1 | No fix listed |
| f5 big-ip webaccelerator | >= 10.2.1, <= 10.2.4 | No fix listed |
| f5 big-ip webaccelerator | = 11.2.1 | No fix listed |
| f5 big-iq adc | = 4.5.0 | No fix listed |
| f5 big-iq centralized management | >= 5.0.0, <= 5.4.0 | No fix listed |
| f5 big-iq centralized management | >= 6.0.0, <= 6.1.0 | No fix listed |
| f5 big-iq centralized management | = 4.6.0 | No fix listed |
| f5 big-iq cloud | >= 4.0.0, <= 4.5.0 | No fix listed |
| f5 big-iq cloud and orchestration | = 1.0.0 | No fix listed |
| f5 big-iq device | >= 4.2.0, <= 4.5.0 | No fix listed |
| f5 big-iq security | >= 4.0.0, <= 4.5.0 | No fix listed |
| f5 enterprise manager | = 3.1.1 | No fix listed |
| f5 iworkflow | >= 2.0.0, <= 2.3.0 | No fix listed |
| f5 mobilesafe | = 1.0.0 | No fix listed |
| f5 websafe | = 1.0.0 | No fix listed |
| ntp | = 4.2.7p25 | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- exchange.xforce.ibmcloud.com third-party-advisory vdb-entry
- support.f5.com
- support.f5.com