Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Network Time Protocol Ephemeral Association Time Spoofing Vulnerability

🗓️ 26 Apr 2016 00:00:00Reported by Talos IntelligenceType 
talos
 talos🔗 www.talosintelligence.com👁 35 Views

ntpd vulnerable to Sybil attacks, allows malicious associations to modify victim's clock. Requires trusted keys for association creation. Ephemeral broadcast and manycast associations also vulnerable. All ntpd instances using 'trustedkey' directive are vulnerable

Related
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple ntp vulnerabilities
18 Jun 201801:32
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in NTP affect IBM Flex System Chassis Management Module
31 Jan 201902:25
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in NTP affect IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter
14 Apr 202314:32
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in NTP affect AIX
14 Aug 201821:30
–ibm
FreeBSD		ntp -- multiple vulnerabilities
27 Feb 201800:00
–freebsd
FreeBSD		ntp -- multiple vulnerabilities
26 Apr 201600:00
–freebsd
Tenable Nessus		Amazon Linux 2 : ntp (ALAS-2018-1009)
11 May 201800:00
–nessus
Tenable Nessus		Amazon Linux AMI : ntp (ALAS-2018-1009)
11 May 201800:00
–nessus
Tenable Nessus		Amazon Linux AMI : ntp (ALAS-2018-1083)
20 Sep 201800:00
–nessus
Tenable Nessus		Arista Networks EOS Multiple Vulnerabilities (SA0019)
28 Feb 201800:00
–nessus
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
26 Apr 2016 00:00Current
6.7Medium risk
Vulners AI Score6.7
CVSS 24
CVSS 36.5
EPSS0.00969
ntpdsybil attackassociationtrusted keysvulnerabilityephemeral associationsbroadcastmanycastntpntpsecmalicioustime spoofing
35