CVE-2016-9042 An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected....
MediumCVSS 5.9
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ntp(Debian:11) | < 1:4.2.8p10+dfsg-1 | 1:4.2.8p10+dfsg-1 |
| ntp | = 4.2.8-p9 | No fix listed |
| freebsd | = 10.0 | No fix listed |
| freebsd | = 11.0 | No fix listed |
| hpe hpux-ntp | < c.4.2.8.4.0 | c.4.2.8.4.0 |
| Siemens simatic net cp 443-1 opc ua firmware | All versions | No fix listed |
| Talos Network Time Protocol | = NTP 4.2.8p9 | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- packetstormsecurity.com
- packetstormsecurity.com
- 20171101 APPLE-SA-2017-10-31-8 Additional information for APPLE-SA-2017-09-25-1 macOS High Sierra 10.13 mailing-list
- 20170925 APPLE-SA-2017-09-25-1 macOS High Sierra 10.13 mailing-list
- 20170412 FreeBSD Security Advisory FreeBSD-SA-17:03.ntp mailing-list
- 20170412 FreeBSD Security Advisory FreeBSD-SA-17:03.ntp mailing-list
- 20170422 [slackware-security] ntp (SSA:2017-112-02) mailing-list
- 97046 permissions-required third-party-advisory vdb-entry
- 1038123 third-party-advisory vdb-entry
- 1039427 third-party-advisory vdb-entry
- USN-3349-1 vendor-advisory
- bto.bluecoat.com
- cert-portal.siemens.com third-party-advisory
- kc.mcafee.com
- FEDORA-2017-20d54b2782 vendor-advisory
- FreeBSD-SA-17:03 third-party-advisory vendor-advisory
- support.apple.com
- support.f5.com
- support.hpe.com third-party-advisory
- us-cert.cisa.gov
- www.talosintelligence.com exploit mitigation third-party-advisory