K43205719 : NTP input validation vulnerability CVE-2016-1550

Security Advisory Description

An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key. (CVE-2016-1550)
Impact
This vulnerability may allow an attacker to conduct a timing attack and compute the value of the valid authentication digest, causing forged packets to be accepted by ntpd.