NetSight
IP …
high7.5

CVE-2016-7426

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers…

Impact

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.

Affected products

VendorProductAffected versions
NtpNtp
from 4.2.6 before 4.2.8
from 4.3.0 before 4.3.94
Versions 4.2.5, 4.2.8
CanonicalUbuntu Linux
Version 12.04
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Eus
Versions 7.3, 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server Tus
Versions 7.3, 7.6, 7.7
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
HpeHpux-Ntp
from b.11.31 before c.4.2.8.2.0

Weakness classification

CWE-400

References