CVE-2016-4953 ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at....
HighCVSS 7.5
EPSS 17.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ntp(Debian:11) | < 1:4.2.8p8+dfsg-1 | 1:4.2.8p8+dfsg-1 |
| ntp | >= 4.2.0, < 4.2.8 | 4.2.8 |
| ntp | >= 4.3.0, < 4.3.93 | 4.3.93 |
| ntp | = 4.2.8 | No fix listed |
| ntp | = 4.2.8-p1 | No fix listed |
| ntp | = 4.2.8-p1-beta1 | No fix listed |
| ntp | = 4.2.8-p1-beta2 | No fix listed |
| ntp | = 4.2.8-p1-beta3 | No fix listed |
| ntp | = 4.2.8-p1-beta4 | No fix listed |
| ntp | = 4.2.8-p1-beta5 | No fix listed |
| ntp | = 4.2.8-p1-rc1 | No fix listed |
| ntp | = 4.2.8-p1-rc2 | No fix listed |
| ntp | = 4.2.8-p2 | No fix listed |
| ntp | = 4.2.8-p2-rc1 | No fix listed |
| ntp | = 4.2.8-p2-rc2 | No fix listed |
| ntp | = 4.2.8-p2-rc3 | No fix listed |
| ntp | = 4.2.8-p3 | No fix listed |
| ntp | = 4.2.8-p3-rc1 | No fix listed |
| ntp | = 4.2.8-p3-rc2 | No fix listed |
| ntp | = 4.2.8-p3-rc3 | No fix listed |
| ntp | = 4.2.8-p4 | No fix listed |
| ntp | = 4.2.8-p5 | No fix listed |
| ntp | = 4.2.8-p6 | No fix listed |
| ntp | = 4.2.8-p7 | No fix listed |
| oracle solaris | = 10 | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle solaris | = 11.3 | No fix listed |
| SUSE manager | = 2.1 | No fix listed |
| SUSE manager proxy | = 2.1 | No fix listed |
| SUSE openstack cloud | = 5 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| SUSE linux enterprise desktop | = 12-sp1 | No fix listed |
| SUSE linux enterprise server | = 11-sp2 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 11-sp4 | No fix listed |
| SUSE linux enterprise server | = 12-sp1 | No fix listed |
| Siemens simatic net cp 443-1 opc ua firmware | All versions | No fix listed |
| Siemens tim 4r-ie firmware | All versions | No fix listed |
| Siemens tim 4r-ie dnp3 firmware | All versions | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- bugs.ntp.org issue-tracking vendor-advisory
- SUSE-SU-2016:1563 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:1568 vendor-advisory
- openSUSE-SU-2016:1583 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:1584 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:1602 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:1636 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:1912 vendor-advisory
- SUSE-SU-2016:2094 vendor-advisory
- packetstormsecurity.com
- packetstormsecurity.com
- support.ntp.org patch vendor-advisory
- support.ntp.org vendor-advisory
- 20160603 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: June 2016 vendor-advisory
- VU#321640 third-party-advisory us-government-resource
- www.oracle.com third-party-advisory
- 20160604 [slackware-security] ntp (SSA:2016-155-01) mailing-list
- 20160604 FreeBSD Security Advisory FreeBSD-SA-16:24.ntp mailing-list
- 20170607 [security bulletin] HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (DoS) mailing-list
- 20160604 [slackware-security] ntp (SSA:2016-155-01) mailing-list
- 20160604 FreeBSD Security Advisory FreeBSD-SA-16:24.ntp mailing-list
- 20170607 [security bulletin] HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (DoS) mailing-list
- 91010 third-party-advisory vdb-entry
- 1036037 third-party-advisory vdb-entry
- cert-portal.siemens.com third-party-advisory
- cert-portal.siemens.com third-party-advisory
- h20566.www2.hpe.com third-party-advisory
- FreeBSD-SA-16:24 third-party-advisory vendor-advisory
- GLSA-201607-15 third-party-advisory vendor-advisory
- us-cert.cisa.gov third-party-advisory us-government-resource
- us-cert.cisa.gov
- VU#321640 third-party-advisory