ACCESS Unknown

Notified:  December 18, 2014 Updated: December 18, 2014

Status

Unknown

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor References

    Alcatel-Lucent Unknown

    Notified:  December 18, 2014 Updated: December 18, 2014

    Status

    Unknown

    Vendor Statement

    No statement is currently available from the vendor regarding this vulnerability.

    Vendor References

      Apple Affected

      Notified:  December 18, 2014 Updated: December 23, 2014

      Status

      Affected

      Vendor Statement

      From the Apple support advisory: "OS X NTP Security Update - ntpd Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10.1 Impact: A remote attacker may be able to execute arbitrary code Description: Several issues existed in ntpd that would have allowed an attacker to trigger buffer overflows. These issues were addressed through improved error checking. To verify the ntpd version, type the following command in Terminal: what /usr/sbin/ntpd. This update includes the following versions: Mountain Lion: ntp-77.1.1 Mavericks: ntp-88.1.1 Yosemite: ntp-92.5.1 CVE-ID CVE-2014-9295 : Stephen Roettger of the Google Security Team"

      Vendor Information

      We are not aware of further vendor information regarding this vulnerability.

      Vendor References

      Arch Linux Unknown

      Notified:  December 19, 2014 Updated: December 19, 2014

      Status

      Unknown

      Vendor Statement

      No statement is currently available from the vendor regarding this vulnerability.

      Vendor References

        AT&T Unknown

        Notified:  December 18, 2014 Updated: December 18, 2014

        Status

        Unknown

        Vendor Statement

        No statement is currently available from the vendor regarding this vulnerability.

        Vendor References

          Avaya, Inc. Unknown

          Notified:  December 18, 2014 Updated: December 18, 2014

          Status

          Unknown

          Vendor Statement

          No statement is currently available from the vendor regarding this vulnerability.

          Vendor References

            Barracuda Networks Unknown

            Notified:  December 18, 2014 Updated: December 18, 2014

            Status

            Unknown

            Vendor Statement

            No statement is currently available from the vendor regarding this vulnerability.

            Vendor References

              Belkin, Inc. Not Affected

              Notified:  December 18, 2014 Updated: March 05, 2015

              Statement Date:   March 05, 2015

              Status

              Not Affected

              Vendor Statement

              No statement is currently available from the vendor regarding this vulnerability.

              Vendor Information

              We are not aware of further vendor information regarding this vulnerability.

              Blue Coat Systems Unknown

              Notified:  December 18, 2014 Updated: December 18, 2014

              Status

              Unknown

              Vendor Statement

              No statement is currently available from the vendor regarding this vulnerability.

              Vendor References

                CA Technologies Unknown

                Notified:  December 18, 2014 Updated: December 18, 2014

                Status

                Unknown

                Vendor Statement

                No statement is currently available from the vendor regarding this vulnerability.

                Vendor References

                  CentOS Unknown

                  Notified:  December 18, 2014 Updated: December 18, 2014

                  Status

                  Unknown

                  Vendor Statement

                  No statement is currently available from the vendor regarding this vulnerability.

                  Vendor References

                    Check Point Software Technologies Unknown

                    Notified:  December 18, 2014 Updated: December 18, 2014

                    Status

                    Unknown

                    Vendor Statement

                    No statement is currently available from the vendor regarding this vulnerability.

                    Vendor References

                      Cisco Systems, Inc. Affected

                      Notified:  December 18, 2014 Updated: January 13, 2015

                      Statement Date:   January 13, 2015

                      Status

                      Affected

                      Vendor Statement

                      No statement is currently available from the vendor regarding this vulnerability.

                      Vendor Information

                      Cisco Systems has released a Cisco Security Advisory on their products, available at the URL: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141222-ntpd

                      Vendor References

                      Cray Inc. Unknown

                      Notified:  December 18, 2014 Updated: December 18, 2014

                      Status

                      Unknown

                      Vendor Statement

                      No statement is currently available from the vendor regarding this vulnerability.

                      Vendor References

                        Debian GNU/Linux Unknown

                        Notified:  December 18, 2014 Updated: December 18, 2014

                        Status

                        Unknown

                        Vendor Statement

                        No statement is currently available from the vendor regarding this vulnerability.

                        Vendor References

                          D-Link Systems, Inc. Unknown

                          Notified:  December 18, 2014 Updated: December 18, 2014

                          Status

                          Unknown

                          Vendor Statement

                          No statement is currently available from the vendor regarding this vulnerability.

                          Vendor References

                            DragonFly BSD Project Unknown

                            Notified:  December 18, 2014 Updated: December 18, 2014

                            Status

                            Unknown

                            Vendor Statement

                            No statement is currently available from the vendor regarding this vulnerability.

                            Vendor References

                              EfficientIP Affected

                              Updated:  December 24, 2014

                              Statement Date:   December 24, 2014

                              Status

                              Affected

                              Vendor Statement

                              "All versions are affected by CWE-389 (CVE-2014-9296).  Upgrade to the latest patch of your release: 5.0.4.p1a, 5.0.3.p4a or 4.0.2p13d. Available releases can be downloaded at: http://www.efficientip.com/support-services/"

                              Vendor Information

                              CVE-2014-9296 covers this vulnerability for ntpd.

                              Vendor References

                              EMC Corporation Unknown

                              Notified:  December 18, 2014 Updated: December 18, 2014

                              Status

                              Unknown

                              Vendor Statement

                              No statement is currently available from the vendor regarding this vulnerability.

                              Vendor References

                                Engarde Secure Linux Unknown

                                Notified:  December 18, 2014 Updated: December 18, 2014

                                Status

                                Unknown

                                Vendor Statement

                                No statement is currently available from the vendor regarding this vulnerability.

                                Vendor References

                                  Enterasys Networks Unknown

                                  Notified:  December 18, 2014 Updated: December 18, 2014

                                  Status

                                  Unknown

                                  Vendor Statement

                                  No statement is currently available from the vendor regarding this vulnerability.

                                  Vendor References

                                    Ericsson Unknown

                                    Notified:  December 18, 2014 Updated: December 18, 2014

                                    Status

                                    Unknown

                                    Vendor Statement

                                    No statement is currently available from the vendor regarding this vulnerability.

                                    Vendor References

                                      eSoft, Inc. Unknown

                                      Notified:  December 18, 2014 Updated: December 18, 2014

                                      Status

                                      Unknown

                                      Vendor Statement

                                      No statement is currently available from the vendor regarding this vulnerability.

                                      Vendor References

                                        Extreme Networks Unknown

                                        Notified:  December 18, 2014 Updated: December 18, 2014

                                        Status

                                        Unknown

                                        Vendor Statement

                                        No statement is currently available from the vendor regarding this vulnerability.

                                        Vendor References

                                          F5 Networks, Inc. Affected

                                          Notified:  December 18, 2014 Updated: January 13, 2015

                                          Statement Date:   January 13, 2015

                                          Status

                                          Affected

                                          Vendor Statement

                                          No statement is currently available from the vendor regarding this vulnerability.

                                          Vendor Information

                                          F5 has released a security advisory for its products at the URL: https://support.f5.com/kb/en-us/solutions/public/15000/900/sol15936.html

                                          Vendor References

                                          Fedora Project Unknown

                                          Notified:  December 18, 2014 Updated: December 18, 2014

                                          Status

                                          Unknown

                                          Vendor Statement

                                          No statement is currently available from the vendor regarding this vulnerability.

                                          Vendor References

                                            Force10 Networks, Inc. Unknown

                                            Notified:  December 18, 2014 Updated: December 18, 2014

                                            Status

                                            Unknown

                                            Vendor Statement

                                            No statement is currently available from the vendor regarding this vulnerability.

                                            Vendor References

                                              Fortinet, Inc. Not Affected

                                              Notified:  December 18, 2014 Updated: December 24, 2014

                                              Statement Date:   December 24, 2014

                                              Status

                                              Not Affected

                                              Vendor Statement

                                              "Fortigate products are not vulnerable."

                                              Vendor Information

                                              We are not aware of further vendor information regarding this vulnerability.

                                              Foundry Networks, Inc. Unknown

                                              Notified:  December 19, 2014 Updated: December 19, 2014

                                              Status

                                              Unknown

                                              Vendor Statement

                                              No statement is currently available from the vendor regarding this vulnerability.

                                              Vendor References

                                                FreeBSD Project Affected

                                                Notified:  December 18, 2014 Updated: April 10, 2015

                                                Statement Date:   December 19, 2014

                                                Status

                                                Affected

                                                Vendor Statement

                                                "All currently supported FreeBSD releases (8.4, 9.1, 9.2, 9.3, 10.0 and 10.1) include vulnerable versions of ntpd."

                                                Vendor Information

                                                FreeBSD has released advisories with patches; please see the Advisory URLs below.

                                                Vendor References

                                                Fujitsu Unknown

                                                Notified:  December 18, 2014 Updated: December 18, 2014

                                                Status

                                                Unknown

                                                Vendor Statement

                                                No statement is currently available from the vendor regarding this vulnerability.

                                                Vendor References

                                                  Gentoo Linux Unknown

                                                  Notified:  December 18, 2014 Updated: December 18, 2014

                                                  Status

                                                  Unknown

                                                  Vendor Statement

                                                  No statement is currently available from the vendor regarding this vulnerability.

                                                  Vendor References

                                                    Global Technology Associates, Inc. Unknown

                                                    Notified:  December 18, 2014 Updated: December 18, 2014

                                                    Status

                                                    Unknown

                                                    Vendor Statement

                                                    No statement is currently available from the vendor regarding this vulnerability.

                                                    Vendor References

                                                      Google Unknown

                                                      Notified:  December 18, 2014 Updated: December 18, 2014

                                                      Status

                                                      Unknown

                                                      Vendor Statement

                                                      No statement is currently available from the vendor regarding this vulnerability.

                                                      Vendor References

                                                        Hewlett-Packard Company Unknown

                                                        Notified:  December 18, 2014 Updated: December 18, 2014

                                                        Status

                                                        Unknown

                                                        Vendor Statement

                                                        No statement is currently available from the vendor regarding this vulnerability.

                                                        Vendor References

                                                          Hitachi Unknown

                                                          Notified:  December 18, 2014 Updated: December 18, 2014

                                                          Status

                                                          Unknown

                                                          Vendor Statement

                                                          No statement is currently available from the vendor regarding this vulnerability.

                                                          Vendor References

                                                            Huawei Technologies Affected

                                                            Updated:  December 23, 2014

                                                            Statement Date:   December 23, 2014

                                                            Status

                                                            Affected

                                                            Vendor Statement

                                                            No statement is currently available from the vendor regarding this vulnerability.

                                                            Vendor Information

                                                            We are not aware of further vendor information regarding this vulnerability.

                                                            IBM Corporation Unknown

                                                            Notified:  December 18, 2014 Updated: December 18, 2014

                                                            Status

                                                            Unknown

                                                            Vendor Statement

                                                            No statement is currently available from the vendor regarding this vulnerability.

                                                            Vendor References

                                                              IBM Corporation (zseries) Unknown

                                                              Notified:  December 18, 2014 Updated: December 18, 2014

                                                              Status

                                                              Unknown

                                                              Vendor Statement

                                                              No statement is currently available from the vendor regarding this vulnerability.

                                                              Vendor References

                                                                IBM eServer Unknown

                                                                Notified:  December 18, 2014 Updated: December 18, 2014

                                                                Status

                                                                Unknown

                                                                Vendor Statement

                                                                No statement is currently available from the vendor regarding this vulnerability.

                                                                Vendor References

                                                                  Infoblox Unknown

                                                                  Notified:  December 18, 2014 Updated: December 18, 2014

                                                                  Status

                                                                  Unknown

                                                                  Vendor Statement

                                                                  No statement is currently available from the vendor regarding this vulnerability.

                                                                  Vendor References

                                                                    Intel Corporation Unknown

                                                                    Notified:  December 18, 2014 Updated: December 18, 2014

                                                                    Status

                                                                    Unknown

                                                                    Vendor Statement

                                                                    No statement is currently available from the vendor regarding this vulnerability.

                                                                    Vendor References

                                                                      Intoto Unknown

                                                                      Notified:  December 18, 2014 Updated: December 18, 2014

                                                                      Status

                                                                      Unknown

                                                                      Vendor Statement

                                                                      No statement is currently available from the vendor regarding this vulnerability.

                                                                      Vendor References

                                                                        Juniper Networks, Inc. Unknown

                                                                        Notified:  December 18, 2014 Updated: December 18, 2014

                                                                        Status

                                                                        Unknown

                                                                        Vendor Statement

                                                                        No statement is currently available from the vendor regarding this vulnerability.

                                                                        Vendor References

                                                                          m0n0wall Not Affected

                                                                          Notified:  December 18, 2014 Updated: December 19, 2014

                                                                          Statement Date:   December 19, 2014

                                                                          Status

                                                                          Not Affected

                                                                          Vendor Statement

                                                                          "m0n0wall does not include ntpd and is therefore not affected.".

                                                                          Vendor Information

                                                                          We are not aware of further vendor information regarding this vulnerability.

                                                                          Mandriva S. A. Unknown

                                                                          Notified:  December 18, 2014 Updated: December 18, 2014

                                                                          Status

                                                                          Unknown

                                                                          Vendor Statement

                                                                          No statement is currently available from the vendor regarding this vulnerability.

                                                                          Vendor References

                                                                            McAfee Unknown

                                                                            Notified:  December 18, 2014 Updated: December 18, 2014

                                                                            Status

                                                                            Unknown

                                                                            Vendor Statement

                                                                            No statement is currently available from the vendor regarding this vulnerability.

                                                                            Vendor References

                                                                              Microsemi Unknown

                                                                              Notified:  December 23, 2014 Updated: December 23, 2014

                                                                              Status

                                                                              Unknown

                                                                              Vendor Statement

                                                                              No statement is currently available from the vendor regarding this vulnerability.

                                                                              Vendor Information

                                                                              We are not aware of further vendor information regarding this vulnerability.

                                                                              Microsoft Corporation Unknown

                                                                              Notified:  December 18, 2014 Updated: December 18, 2014

                                                                              Status

                                                                              Unknown

                                                                              Vendor Statement

                                                                              No statement is currently available from the vendor regarding this vulnerability.

                                                                              Vendor References

                                                                                MontaVista Software, Inc. Unknown

                                                                                Notified:  December 19, 2014 Updated: December 19, 2014

                                                                                Status

                                                                                Unknown

                                                                                Vendor Statement

                                                                                No statement is currently available from the vendor regarding this vulnerability.

                                                                                Vendor References

                                                                                  NEC Corporation Affected

                                                                                  Updated:  October 26, 2015

                                                                                  Status

                                                                                  Affected

                                                                                  Vendor Statement

                                                                                  We provide information on this issue at the following URL (only in Japanese)

                                                                                  Vendor Information

                                                                                  We are not aware of further vendor information regarding this vulnerability.

                                                                                  Vendor References

                                                                                  NEC Corporation Unknown

                                                                                  Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                  Status

                                                                                  Unknown

                                                                                  Vendor Statement

                                                                                  No statement is currently available from the vendor regarding this vulnerability.

                                                                                  Vendor References

                                                                                    NetBSD Unknown

                                                                                    Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                    Status

                                                                                    Unknown

                                                                                    Vendor Statement

                                                                                    No statement is currently available from the vendor regarding this vulnerability.

                                                                                    Vendor References

                                                                                      netfilter Unknown

                                                                                      Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                      Status

                                                                                      Unknown

                                                                                      Vendor Statement

                                                                                      No statement is currently available from the vendor regarding this vulnerability.

                                                                                      Vendor References

                                                                                        Nokia Unknown

                                                                                        Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                        Status

                                                                                        Unknown

                                                                                        Vendor Statement

                                                                                        No statement is currently available from the vendor regarding this vulnerability.

                                                                                        Vendor References

                                                                                          Novell, Inc. Unknown

                                                                                          Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                          Status

                                                                                          Unknown

                                                                                          Vendor Statement

                                                                                          No statement is currently available from the vendor regarding this vulnerability.

                                                                                          Vendor References

                                                                                            NTP Project Affected

                                                                                            Notified:  December 03, 2014 Updated: December 22, 2014

                                                                                            Statement Date:   December 19, 2014

                                                                                            Status

                                                                                            Affected

                                                                                            Vendor Statement

                                                                                            No statement is currently available from the vendor regarding this vulnerability.

                                                                                            Vendor Information

                                                                                            Please see the vendor Security Notice at the URL below.

                                                                                            Vendor References

                                                                                            OmniTI Affected

                                                                                            Notified:  December 20, 2014 Updated: December 22, 2014

                                                                                            Statement Date:   December 20, 2014

                                                                                            Status

                                                                                            Affected

                                                                                            Vendor Statement

                                                                                            "Affected, but Update now available"

                                                                                            Vendor Information

                                                                                            We are not aware of further vendor information regarding this vulnerability.

                                                                                            OpenBSD Not Affected

                                                                                            Notified:  December 18, 2014 Updated: December 19, 2014

                                                                                            Statement Date:   December 19, 2014

                                                                                            Status

                                                                                            Not Affected

                                                                                            Vendor Statement

                                                                                            "OpenBSD does not use ntp.org code."

                                                                                            Vendor Information

                                                                                            We are not aware of further vendor information regarding this vulnerability.

                                                                                            Openwall GNU/*/Linux Not Affected

                                                                                            Notified:  December 18, 2014 Updated: December 21, 2014

                                                                                            Statement Date:   December 20, 2014

                                                                                            Status

                                                                                            Not Affected

                                                                                            Vendor Statement

                                                                                            "Openwall GNU/*/Linux is not affected. We use OpenNTPD."

                                                                                            Vendor Information

                                                                                            We are not aware of further vendor information regarding this vulnerability.

                                                                                            Oracle Corporation Unknown

                                                                                            Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                            Status

                                                                                            Unknown

                                                                                            Vendor Statement

                                                                                            No statement is currently available from the vendor regarding this vulnerability.

                                                                                            Vendor References

                                                                                              Palo Alto Networks Unknown

                                                                                              Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                              Status

                                                                                              Unknown

                                                                                              Vendor Statement

                                                                                              No statement is currently available from the vendor regarding this vulnerability.

                                                                                              Vendor References

                                                                                                Peplink Unknown

                                                                                                Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                Status

                                                                                                Unknown

                                                                                                Vendor Statement

                                                                                                No statement is currently available from the vendor regarding this vulnerability.

                                                                                                Vendor References

                                                                                                  Process Software Unknown

                                                                                                  Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                  Status

                                                                                                  Unknown

                                                                                                  Vendor Statement

                                                                                                  No statement is currently available from the vendor regarding this vulnerability.

                                                                                                  Vendor References

                                                                                                    Q1 Labs Unknown

                                                                                                    Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                    Status

                                                                                                    Unknown

                                                                                                    Vendor Statement

                                                                                                    No statement is currently available from the vendor regarding this vulnerability.

                                                                                                    Vendor References

                                                                                                      QNX Software Systems Inc. Unknown

                                                                                                      Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                      Status

                                                                                                      Unknown

                                                                                                      Vendor Statement

                                                                                                      No statement is currently available from the vendor regarding this vulnerability.

                                                                                                      Vendor References

                                                                                                        Quagga Unknown

                                                                                                        Notified:  December 19, 2014 Updated: December 19, 2014

                                                                                                        Status

                                                                                                        Unknown

                                                                                                        Vendor Statement

                                                                                                        No statement is currently available from the vendor regarding this vulnerability.

                                                                                                        Vendor References

                                                                                                          Red Hat, Inc. Affected

                                                                                                          Notified:  December 18, 2014 Updated: December 30, 2014

                                                                                                          Status

                                                                                                          Affected

                                                                                                          Vendor Statement

                                                                                                          No statement is currently available from the vendor regarding this vulnerability.

                                                                                                          Vendor Information

                                                                                                          Red Hat has released updated packages for ntpd to address these vulnerabilities. You may find information about the vulnerabilities and the updated packages at the link below: https://rhn.redhat.com/errata/RHSA-2014-2024.html

                                                                                                          Vendor References

                                                                                                          SafeNet Unknown

                                                                                                          Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                          Status

                                                                                                          Unknown

                                                                                                          Vendor Statement

                                                                                                          No statement is currently available from the vendor regarding this vulnerability.

                                                                                                          Vendor References

                                                                                                            Slackware Linux Inc. Unknown

                                                                                                            Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                            Status

                                                                                                            Unknown

                                                                                                            Vendor Statement

                                                                                                            No statement is currently available from the vendor regarding this vulnerability.

                                                                                                            Vendor References

                                                                                                              SmoothWall Unknown

                                                                                                              Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                              Status

                                                                                                              Unknown

                                                                                                              Vendor Statement

                                                                                                              No statement is currently available from the vendor regarding this vulnerability.

                                                                                                              Vendor References

                                                                                                                Snort Unknown

                                                                                                                Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                                Status

                                                                                                                Unknown

                                                                                                                Vendor Statement

                                                                                                                No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                Vendor References

                                                                                                                  Sony Corporation Unknown

                                                                                                                  Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                                  Status

                                                                                                                  Unknown

                                                                                                                  Vendor Statement

                                                                                                                  No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                  Vendor References

                                                                                                                    Sourcefire Unknown

                                                                                                                    Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                                    Status

                                                                                                                    Unknown

                                                                                                                    Vendor Statement

                                                                                                                    No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                    Vendor References

                                                                                                                      Stonesoft Unknown

                                                                                                                      Notified:  December 19, 2014 Updated: December 19, 2014

                                                                                                                      Status

                                                                                                                      Unknown

                                                                                                                      Vendor Statement

                                                                                                                      No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                      Vendor References

                                                                                                                        SUSE Linux Unknown

                                                                                                                        Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                                        Status

                                                                                                                        Unknown

                                                                                                                        Vendor Statement

                                                                                                                        No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                        Vendor References

                                                                                                                          Symantec Unknown

                                                                                                                          Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                                          Status

                                                                                                                          Unknown

                                                                                                                          Vendor Statement

                                                                                                                          No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                          Vendor References

                                                                                                                            The SCO Group Unknown

                                                                                                                            Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                                            Status

                                                                                                                            Unknown

                                                                                                                            Vendor Statement

                                                                                                                            No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                            Vendor References

                                                                                                                              TippingPoint Technologies Inc. Unknown

                                                                                                                              Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                                              Status

                                                                                                                              Unknown

                                                                                                                              Vendor Statement

                                                                                                                              No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                              Vendor References

                                                                                                                                Turbolinux Unknown

                                                                                                                                Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                                                Status

                                                                                                                                Unknown

                                                                                                                                Vendor Statement

                                                                                                                                No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                                Vendor References

                                                                                                                                  Ubuntu Unknown

                                                                                                                                  Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                                                  Status

                                                                                                                                  Unknown

                                                                                                                                  Vendor Statement

                                                                                                                                  No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                                  Vendor References

                                                                                                                                    Unisys Unknown

                                                                                                                                    Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                                                    Status

                                                                                                                                    Unknown

                                                                                                                                    Vendor Statement

                                                                                                                                    No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                                    Vendor References

                                                                                                                                      VMware Unknown

                                                                                                                                      Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                                                      Status

                                                                                                                                      Unknown

                                                                                                                                      Vendor Statement

                                                                                                                                      No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                                      Vendor References

                                                                                                                                        Vyatta Unknown

                                                                                                                                        Notified:  December 19, 2014 Updated: December 19, 2014

                                                                                                                                        Status

                                                                                                                                        Unknown

                                                                                                                                        Vendor Statement

                                                                                                                                        No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                                        Vendor References

                                                                                                                                          Watchguard Technologies, Inc. Affected

                                                                                                                                          Notified:  December 18, 2014 Updated: December 19, 2014

                                                                                                                                          Statement Date:   December 19, 2014

                                                                                                                                          Status

                                                                                                                                          Affected

                                                                                                                                          Vendor Statement

                                                                                                                                          "Our XTM and Firebox appliances (our main products) are not vulnerable to these flaws, since we use openntpd rather than ntpd. Our wireless access points are not vulnerable since they only use the basic ntpclient. However, our XCS appliances (mail security) are vulnerable to the ntpd flaws. We will be releasing a firmware update to fix these flaws as soon as practical. However, in the meantime, we are sharing simple steps to mitigate this issue (use out firewall to block NTP, and point to an internal, updated NTP server instead)."

                                                                                                                                          Vendor Information

                                                                                                                                          We are not aware of further vendor information regarding this vulnerability.

                                                                                                                                          Wind River Systems, Inc. Unknown

                                                                                                                                          Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                                                          Status

                                                                                                                                          Unknown

                                                                                                                                          Vendor Statement

                                                                                                                                          No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                                          Vendor References

                                                                                                                                            ZyXEL Unknown

                                                                                                                                            Notified:  December 18, 2014 Updated: December 18, 2014

                                                                                                                                            Status

                                                                                                                                            Unknown

                                                                                                                                            Vendor Statement

                                                                                                                                            No statement is currently available from the vendor regarding this vulnerability.

                                                                                                                                            Vendor References

                                                                                                                                              View all 87 vendors View less vendors