BSA-2017-223
21548
31 March 2017
31 March 2017
Closed
Medium
5.3
N/A
CVE-2016-7431
Summary
Security Advisory ID : BSA-2017-223
Component : ntp
Revision : 1.0: Interim
Zero Origin timestamp problems were fixed by Bug 2945 in ntp-4.2.8p6. However, subsequent timestamp validation checks introduced a regression in the handling of some Zero origin timestamp checks.
Affected Products
| Product | Current Assessment |
|---|---|
| Brocade FastIron OS | Impacted: Fixed in 8.0.61. |
| Brocade NetIron OS | Impacted: Fixed in 6.2. |
| Brocade Services Director | Impacted: Fixed in 17.1 and later. |
Products Confirmed Not Vulnerable
Brocade 5600 vRouter, Brocade Fabric OS, Brocade Network Advisor, Brocade Network OS, Brocade SDN Controller, Brocade ServerIron ADX, Brocade SLX-OS, Brocade Virtual ADX, Brocade Virtual Traffic Manager: Software, and Brocade Virtual Web Application Firewall are confirmed not affected by this vulnerability.
Workaround
There are no workarounds that address this vulnerability.
Revision History
| Version | Change | Date |
|---|---|---|
| 1.0 | Initial Publication | March 31, 2017 |