medium5.3
CVE-2016-7431
NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero.
Impact
NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ntp | Ntp | Version 4.2.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html
- http://nwtime.org/ntp428p9_release/
- http://packetstormsecurity.com/files/140240/FreeBSD-Security-Advisory-FreeBSD-SA-16.39.ntp.html
- http://support.ntp.org/bin/view/Main/NtpBug3102
- http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.securityfocus.com/archive/1/539955/100/0/threaded
- http://www.securityfocus.com/archive/1/540254/100/0/threaded
- http://www.securityfocus.com/archive/1/archive/1/539955/100/0/threaded
- http://www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded
- http://www.securityfocus.com/bid/94454
- http://www.securitytracker.com/id/1037354
- http://www.ubuntu.com/usn/USN-3349-1
- https://bto.bluecoat.com/security-advisory/sa139
- https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us
- https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03883en_us
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03899en_us
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_us
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03899en_us
- https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-223/
- https://www.kb.cert.org/vuls/id/633847