Back to feed
EUVD-2016-5928 · Published Jul 5, 2016
The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.
Technologies
Oracle SolarisSiemens Tim 4R-Ie FirmwareSuse Openstack CloudOpensuse LeapSuse Manager ProxyOpensuse OpensuseSuse Linux Enterprise ServerSiemens Tim 4R-Ie Dnp3 FirmwareSiemens Tim 4R-IeNtp NtpSuse ManagerSuse Linux Enterprise DesktopSiemens Simatic Net Cp 443-1 Opc UaSiemens Simatic Net Cp 443-1 Opc Ua FirmwareSiemens Tim 4R-Ie Dnp3
Weaknesses
CWE-362
CVSS scores
- v3.17.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - v2.05.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://packetstormsecurity.com/files/137321/Slackware-Security-Advisory-ntp-Updates.html
- http://packetstormsecurity.com/files/137322/FreeBSD-Security-Advisory-FreeBSD-SA-16-24.ntp.html
- http://bugs.ntp.org/3044
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html
Potentially impacted assets
See if this affects your attack surface
