CVE-2015-3405 ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is betwee...
HighCVSS 7.5
EPSS 5.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 keys via a brute force attack with the 93 possible keys.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ntp(Debian:11) | < 1:4.2.6.p5+dfsg-7 | 1:4.2.6.p5+dfsg-7 |
| ntp | = 4.2.8-p1 | No fix listed |
| ntp | = 4.2.8-p2 | No fix listed |
| ntp | = 4.2.8-p2-rc1 | No fix listed |
| ntp | = 4.3.0 | No fix listed |
| ntp | = 4.3.1 | No fix listed |
| ntp | = 4.3.2 | No fix listed |
| ntp | = 4.3.3 | No fix listed |
| ntp | = 4.3.4 | No fix listed |
| ntp | = 4.3.5 | No fix listed |
| ntp | = 4.3.6 | No fix listed |
| ntp | = 4.3.7 | No fix listed |
| ntp | = 4.3.8 | No fix listed |
| ntp | = 4.3.9 | No fix listed |
| ntp | = 4.3.10 | No fix listed |
| ntp | = 4.3.11 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| openSUSE suse linux enterprise server | = 11.0-sp3 | No fix listed |
| opensuse project suse linux enterprise desktop | = 11.0-sp3 | No fix listed |
| suse linux enterprise server | = 11.0-sp3 | No fix listed |
| fedoraproject fedora | = 21 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux for ibm z systems | = 6.0 | No fix listed |
| redhat enterprise linux for power big endian | = 6.0 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise linux for scientific computing | = 6.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server from rhui 6 | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- bk1.ntp.org third-party-advisory vendor-advisory
- FEDORA-2015-5830 third-party-advisory vendor-advisory
- SUSE-SU-2015:1173 third-party-advisory vendor-advisory
- RHSA-2015:1459 third-party-advisory vdb-entry vendor-advisory
- RHSA-2015:2231 third-party-advisory vdb-entry vendor-advisory
- DSA-3223 third-party-advisory vendor-advisory
- DSA-3388 third-party-advisory vendor-advisory
- [oss-security] 20150423 Re: CVE request: ntp-keygen may generate non-random symmetric keys on big-endian systems mailing-list third-party-advisory
- www.oracle.com
- www.oracle.com
- 74045 third-party-advisory vdb-entry
- bugs.ntp.org issue-tracking third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory vdb-entry
- support.hpe.com