CVE-2015-1798

CVE-2015-1798 affects ntpd (NTP 4.x) where the receive path in ntp_proto.c accepts packets with no MAC or with a missing MAC verification when a symmetric key is configured. This weakness, present in versions prior to 4.2.8p2, enables a man-in-the-middle attacker to spoof authenticated traffic by...