CVE-2014-9293 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-9293 Interim 1 34 2025-11-05T05:00:41Z current 2021-05-30T13:24:35Z 2025-11-05T05:00:41Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-9293 The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2015-February/001217.html E-Mail link for SUSE-SU-2015:0259-1 https://lists.suse.com/pipermail/sle-security-updates/2015-February/001222.html E-Mail link for SUSE-SU-2015:0259-2 https://lists.suse.com/pipermail/sle-security-updates/2015-February/001229.html E-Mail link for SUSE-SU-2015:0259-3 https://lists.suse.com/pipermail/sle-security-updates/2015-February/001220.html E-Mail link for SUSE-SU-2015:0274-1 https://lists.suse.com/pipermail/sle-security-updates/2015-February/001237.html E-Mail link for SUSE-SU-2015:0322-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Liberty Linux 7 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Legacy 15 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP6 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Legacy 15 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP6 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Legacy 15 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP6 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Module for Legacy 15 SP1 SUSE Linux Enterprise Module for Legacy 15 SP2 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE OpenStack Cloud 6 openSUSE Tumbleweed ntp ntp-4.2.4p8-1.29.32.1 ntp-4.2.6p5-19.el7_0 ntp-4.2.6p5-37.2 ntp-4.2.8p10-63.3 ntp-4.2.8p11-2.12 ntp-4.2.8p12-64.8.2 ntp-4.2.8p13-4.6.1 ntp-4.2.8p13-85.1 ntp-4.2.8p15-150000.4.22.1 ntp-4.2.8p15-4.13.1 ntp-4.2.8p15-4.19.1 ntp-4.2.8p17-150600.18.2 ntp-4.2.8p4-1.3 ntp-4.2.8p8-14.1 ntp-4.2.8p9-1.1 ntp-doc-4.2.4p8-1.29.32.1 ntp-doc-4.2.6p5-19.el7_0 ntp-doc-4.2.6p5-37.2 ntp-doc-4.2.8p10-63.3 ntp-doc-4.2.8p12-64.8.2 ntp-doc-4.2.8p13-85.1 ntp-doc-4.2.8p4-1.3 ntp-doc-4.2.8p8-14.1 ntp-doc-4.2.8p9-1.1 ntp-perl-4.2.6p5-19.el7_0 ntpdate-4.2.6p5-19.el7_0 sntp-4.2.6p5-19.el7_0 ntp-4.2.6p5-19.el7_0 as a component of SUSE Liberty Linux 7 ntp-doc-4.2.6p5-19.el7_0 as a component of SUSE Liberty Linux 7 ntp-perl-4.2.6p5-19.el7_0 as a component of SUSE Liberty Linux 7 ntpdate-4.2.6p5-19.el7_0 as a component of SUSE Liberty Linux 7 sntp-4.2.6p5-19.el7_0 as a component of SUSE Liberty Linux 7 ntp-4.2.4p8-1.29.32.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 ntp-doc-4.2.4p8-1.29.32.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 ntp-4.2.6p5-37.2 as a component of SUSE Linux Enterprise Desktop 12 ntp-doc-4.2.6p5-37.2 as a component of SUSE Linux Enterprise Desktop 12 ntp-4.2.8p4-1.3 as a component of SUSE Linux Enterprise Desktop 12 SP1 ntp-doc-4.2.8p4-1.3 as a component of SUSE Linux Enterprise Desktop 12 SP1 ntp-4.2.8p8-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 ntp-doc-4.2.8p8-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 ntp-4.2.8p10-63.3 as a component of SUSE Linux Enterprise Desktop 12 SP3 ntp-doc-4.2.8p10-63.3 as a component of SUSE Linux Enterprise Desktop 12 SP3 ntp-4.2.8p12-64.8.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 ntp-doc-4.2.8p12-64.8.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 ntp-4.2.8p13-85.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 ntp-doc-4.2.8p13-85.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 ntp-4.2.8p11-2.12 as a component of SUSE Linux Enterprise Module for Legacy 15 ntp-4.2.8p13-4.6.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP1 ntp-4.2.8p13-4.6.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP2 ntp-4.2.8p15-4.13.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP3 ntp-4.2.8p15-4.19.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP4 ntp-4.2.8p15-150000.4.22.1 as a component of SUSE Linux Enterprise Module for Legacy 15 SP5 ntp-4.2.8p17-150600.18.2 as a component of SUSE Linux Enterprise Module for Legacy 15 SP6 ntp-4.2.8p17-150600.18.2 as a component of SUSE Linux Enterprise Module for Legacy 15 SP7 ntp-4.2.4p8-1.29.32.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS ntp-doc-4.2.4p8-1.29.32.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS ntp-4.2.4p8-1.29.32.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA ntp-doc-4.2.4p8-1.29.32.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA ntp-4.2.4p8-1.29.32.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS ntp-doc-4.2.4p8-1.29.32.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS ntp-4.2.4p8-1.29.32.1 as a component of SUSE Linux Enterprise Server 11 SP3 ntp-doc-4.2.4p8-1.29.32.1 as a component of SUSE Linux Enterprise Server 11 SP3 ntp-4.2.4p8-1.29.32.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA ntp-doc-4.2.4p8-1.29.32.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA ntp-4.2.6p5-37.2 as a component of SUSE Linux Enterprise Server 12 ntp-doc-4.2.6p5-37.2 as a component of SUSE Linux Enterprise Server 12 ntp-4.2.8p4-1.3 as a component of SUSE Linux Enterprise Server 12 SP1 ntp-doc-4.2.8p4-1.3 as a component of SUSE Linux Enterprise Server 12 SP1 ntp-4.2.8p8-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 ntp-doc-4.2.8p8-14.1 as a component of SUSE Linux Enterprise Server 12 SP2 ntp-4.2.8p10-63.3 as a component of SUSE Linux Enterprise Server 12 SP3 ntp-doc-4.2.8p10-63.3 as a component of SUSE Linux Enterprise Server 12 SP3 ntp-4.2.8p12-64.8.2 as a component of SUSE Linux Enterprise Server 12 SP4 ntp-doc-4.2.8p12-64.8.2 as a component of SUSE Linux Enterprise Server 12 SP4 ntp-4.2.8p13-85.1 as a component of SUSE Linux Enterprise Server 12 SP5 ntp-doc-4.2.8p13-85.1 as a component of SUSE Linux Enterprise Server 12 SP5 ntp-4.2.8p8-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 ntp-doc-4.2.8p8-14.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 ntp-4.2.4p8-1.29.32.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 ntp-doc-4.2.4p8-1.29.32.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 ntp-4.2.6p5-37.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 ntp-doc-4.2.6p5-37.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 ntp-4.2.8p13-85.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 ntp-doc-4.2.8p13-85.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 ntp-4.2.8p4-1.3 as a component of SUSE OpenStack Cloud 6 ntp-4.2.8p9-1.1 as a component of openSUSE Tumbleweed ntp-doc-4.2.8p9-1.1 as a component of openSUSE Tumbleweed ntp as a component of SUSE Linux Enterprise Server 11 SP4 LTSS The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack. CVE-2014-9293 SUSE Liberty Linux 7:ntp-4.2.6p5-19.el7_0 SUSE Liberty Linux 7:ntp-doc-4.2.6p5-19.el7_0 SUSE Liberty Linux 7:ntp-perl-4.2.6p5-19.el7_0 SUSE Liberty Linux 7:ntpdate-4.2.6p5-19.el7_0 SUSE Liberty Linux 7:sntp-4.2.6p5-19.el7_0 SUSE Linux Enterprise Desktop 11 SP3:ntp-4.2.4p8-1.29.32.1 SUSE Linux Enterprise Desktop 11 SP3:ntp-doc-4.2.4p8-1.29.32.1 SUSE Linux Enterprise Desktop 12:ntp-4.2.6p5-37.2 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.6p5-37.2 SUSE Linux Enterprise Desktop 12 SP1:ntp-4.2.8p4-1.3 SUSE Linux Enterprise Desktop 12 SP1:ntp-doc-4.2.8p4-1.3 SUSE Linux Enterprise Desktop 12 SP2:ntp-4.2.8p8-14.1 SUSE Linux Enterprise Desktop 12 SP2:ntp-doc-4.2.8p8-14.1 SUSE Linux Enterprise Desktop 12 SP3:ntp-4.2.8p10-63.3 SUSE Linux Enterprise Desktop 12 SP3:ntp-doc-4.2.8p10-63.3 SUSE Linux Enterprise Desktop 12 SP4:ntp-4.2.8p12-64.8.2 SUSE Linux Enterprise Desktop 12 SP4:ntp-doc-4.2.8p12-64.8.2 SUSE Linux Enterprise High Performance Computing 12 SP5:ntp-4.2.8p13-85.1 SUSE Linux Enterprise High Performance Computing 12 SP5:ntp-doc-4.2.8p13-85.1 SUSE Linux Enterprise Module for Legacy 15:ntp-4.2.8p11-2.12 SUSE Linux Enterprise Module for Legacy 15 SP1:ntp-4.2.8p13-4.6.1 SUSE Linux Enterprise Module for Legacy 15 SP2:ntp-4.2.8p13-4.6.1 SUSE Linux Enterprise Module for Legacy 15 SP3:ntp-4.2.8p15-4.13.1 SUSE Linux Enterprise Module for Legacy 15 SP4:ntp-4.2.8p15-4.19.1 SUSE Linux Enterprise Module for Legacy 15 SP5:ntp-4.2.8p15-150000.4.22.1 SUSE Linux Enterprise Module for Legacy 15 SP6:ntp-4.2.8p17-150600.18.2 SUSE Linux Enterprise Module for Legacy 15 SP7:ntp-4.2.8p17-150600.18.2 SUSE Linux Enterprise Server 11 SP1-LTSS:ntp-4.2.4p8-1.29.32.1 SUSE Linux Enterprise Server 11 SP1-LTSS:ntp-doc-4.2.4p8-1.29.32.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:ntp-4.2.4p8-1.29.32.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:ntp-doc-4.2.4p8-1.29.32.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.4p8-1.29.32.1 SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.4p8-1.29.32.1 SUSE Linux Enterprise Server 11 SP3:ntp-4.2.4p8-1.29.32.1 SUSE Linux Enterprise Server 11 SP3:ntp-doc-4.2.4p8-1.29.32.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.4p8-1.29.32.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.4p8-1.29.32.1 SUSE Linux Enterprise Server 12:ntp-4.2.6p5-37.2 SUSE Linux Enterprise Server 12:ntp-doc-4.2.6p5-37.2 SUSE Linux Enterprise Server 12 SP1:ntp-4.2.8p4-1.3 SUSE Linux Enterprise Server 12 SP1:ntp-doc-4.2.8p4-1.3 SUSE Linux Enterprise Server 12 SP2:ntp-4.2.8p8-14.1 SUSE Linux Enterprise Server 12 SP2:ntp-doc-4.2.8p8-14.1 SUSE Linux Enterprise Server 12 SP3:ntp-4.2.8p10-63.3 SUSE Linux Enterprise Server 12 SP3:ntp-doc-4.2.8p10-63.3 SUSE Linux Enterprise Server 12 SP4:ntp-4.2.8p12-64.8.2 SUSE Linux Enterprise Server 12 SP4:ntp-doc-4.2.8p12-64.8.2 SUSE Linux Enterprise Server 12 SP5:ntp-4.2.8p13-85.1 SUSE Linux Enterprise Server 12 SP5:ntp-doc-4.2.8p13-85.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-4.2.8p8-14.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:ntp-doc-4.2.8p8-14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:ntp-4.2.4p8-1.29.32.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:ntp-doc-4.2.4p8-1.29.32.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.6p5-37.2 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.6p5-37.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:ntp-4.2.8p13-85.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:ntp-doc-4.2.8p13-85.1 SUSE OpenStack Cloud 6:ntp-4.2.8p4-1.3 openSUSE Tumbleweed:ntp-4.2.8p9-1.1 openSUSE Tumbleweed:ntp-doc-4.2.8p9-1.1 SUSE Linux Enterprise Server 11 SP4 LTSS:ntp important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P