CVE-2016-1549

2017-01-0621:00:00

certcc

www.cve.org

AI Score

6.1

Confidence

High

EPSS

0.002

Percentile

56.0%

JSON

A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim’s clock.

CNA Affected

[
  {
    "product": "NTP",
    "vendor": "NTP Project",
    "versions": [
      {
        "status": "affected",
        "version": "4.2.8p3"
      },
      {
        "status": "affected",
        "version": "4.2.8p4"
      }
    ]
  },
  {
    "product": "NTPSec",
    "vendor": "NTPsec Project",
    "versions": [
      {
        "status": "affected",
        "version": "3e160db8dc248a0bcb053b56a80167dc742d2b74"
      },
      {
        "status": "affected",
        "version": "a5fb34b9cc89b92a8fef2f459004865c93bb7f92"
      }
    ]
  }
]