K45427159: NTP authentication bypass vulnerability CVE-2016-1551

🗓️ 21 Feb 2023 18:20:23Reported by f5Type

f5🔗 my.f5.com👁 33 Views

NTP authentication bypass vulnerability in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f9

Reporter	Title	Published	Views	Family All 63
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple ntp vulnerabilities	18 Jun 201801:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in NTP affect IBM Flex System Chassis Management Module	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in NTP affect IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter	14 Apr 202314:32	–	ibm
Tenable Nessus	AIX 6.1 TL 9 : ntp (IV87419) (deprecated)	8 Sep 201600:00	–	nessus
Tenable Nessus	AIX 7.1 TL 4 : ntp (IV87420) (deprecated)	8 Sep 201600:00	–	nessus
Tenable Nessus	AIX 5.3 TL 12 : ntp (IV87614) (deprecated)	8 Sep 201600:00	–	nessus
Tenable Nessus	AIX 7.1 TL 3 : ntp (IV87615) (deprecated)	8 Sep 201600:00	–	nessus
Tenable Nessus	AIX 7.2 TL 0 : ntp (IV87939) (deprecated)	8 Sep 201600:00	–	nessus
Tenable Nessus	AIX NTP v3 Advisory : ntp_advisory7.asc (IV87614) (IV87419) (IV87615) (IV87420) (IV87939)	3 Aug 201700:00	–	nessus
Tenable Nessus	AIX NTP v4 Advisory : ntp_advisory7.asc (IV87278) (IV87279)	4 Apr 201700:00	–	nessus

Vulners

Node

f5 big-ip_ltmRange12.0.0–12.1.0

OR

f5 big-ip_ltmRange11.0.0–11.6.1

OR

f5 big-ip_ltmRange10.1.0–10.2.4

OR

f5 big-ip_aamRange12.0.0–12.1.0

OR

f5 big-ip_aamRange11.4.0–11.6.1

OR

f5 big-ip_afmRange12.0.0–12.1.0

OR

f5 big-ip_afmRange11.3.0–11.6.1

OR

f5 big-ip_analyticsRange12.0.0–12.1.0

OR

f5 big-ip_analyticsRange11.0.0–11.6.1

OR

f5 big-ip_apmRange12.0.0–12.1.0

OR

f5 big-ip_apmRange11.0.0–11.6.1

OR

f5 big-ip_apmRange10.1.0–10.2.4

OR

f5 big-ip_asmRange12.0.0–12.1.0

OR

f5 big-ip_asmRange11.0.0–11.6.1

OR

f5 big-ip_asmRange10.1.0–10.2.4

OR

f5 big-ip_dnsRange12.0.0–12.1.0

OR

f5 big-ip_edge_gatewayRange11.0.0–11.3.0

OR

f5 big-ip_edge_gatewayRange10.1.0–10.2.4

OR

f5 big-ip_gtmRange11.0.0–11.6.1

OR

f5 big-ip_gtmRange10.1.0–10.2.4

OR

f5 big-ip_link_controllerRange12.0.0–12.1.0

OR

f5 big-ip_link_controllerRange11.0.0–11.6.1

OR

f5 big-ip_link_controllerRange10.1.0–10.2.4

OR

f5 big-ip_pemRange12.0.0–12.1.0

OR

f5 big-ip_pemRange11.3.0–11.6.1

OR

f5 big-ip_psmRange11.0.0–11.4.1

OR

f5 big-ip_psmRange10.1.0–10.2.4

OR

f5 big-ip_webacceleratorRange11.0.0–11.3.0

OR

f5 big-ip_webacceleratorRange10.1.0–10.2.4

OR

f5 big-ip_womRange11.0.0–11.3.0

OR

f5 big-ip_womRange10.1.0–10.2.4

OR

f5 arxRange6.0.0–6.4.0

OR

f5 enterprise_managerRange3.0.0–3.1.1

OR

f5 big-iq_cloudRange4.0.0–4.5.0

OR

f5 big-iq_deviceRange4.2.0–4.5.0

OR

f5 big-iq_securityRange4.0.0–4.5.0

OR

f5 big-iq_adcMatch4.5.0

OR

f5 big-iq_centralized_managementMatch4.6.0

OR

f5 big-iq_cloudMatch1.0.0

OR

f5 big-iq_orchestrationMatch1.0.0

21 Feb 2023 18:20Current

6.2Medium risk

Vulners AI Score6.2

CVSS 22.6

CVSS 33.7

EPSS0.00976

ntp authentication bypass vulnerability ntp 4.2.8p3 ntpsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 reference clocks packet filtering spoofing unauthenticated network attackers