PT-2015-5444 · Ntp+7 · Ntpd+10

Miroslav Lichvar · Published 2014-12-24 · Updated 2024-06-15 · CVE-2015-1798

Positive Technologies (AI Summary)

CVSS v2.0

1.8

Low

Base vector

AV:A/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ntpd versions 4.x through 4.2.8p1

Description The issue allows man-in-the-middle attackers to spoof packets by omitting the MAC, making it easier to launch attacks. This is due to the symmetric-key feature in the receive function requiring a correct MAC only if the MAC field has a nonzero length.

Recommendations For ntpd versions 4.x through 4.2.8p1, update to version 4.2.8p2 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2014-2486

CESA-2015_1459

CESA-2015_2231

CVE-2015-1798

DLA-192-1

DSA-3223-1

HPSBUX03333

MGASA-2015-0152

OPENSUSE-SU-2024:10181-1

RHSA-2015:1459

RHSA-2015:2231

RHSA-2015_1459

RHSA-2015_2231

SUSE-SU-2015:0865-1

SUSE-SU-2015_0865-1

SUSE-SU-2016_1912-1

SUSE-SU-2016_2094-1

USN-2567-1

Affected Products

Alt Linux

Centos

Cisco Ios

Cisco Ios Xe

Cisco Ios Xr

Cisco Nexus

Hp-Ux

Red Hat

Suse

Ubuntu

Ntpd

References · 335

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9296 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-1798 · Security Note
• https://security-tracker.debian.org/tracker/source-package/ntp · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10236 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10181-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5195 · Security Note
• https://bdu.fstec.ru/vul/2015-09295 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7848 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-1798 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3405 · Security Note
• https://bdu.fstec.ru/vul/2015-06453 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7702 · Security Note
• https://cve.org/CVERecord?id=CVE-2015-1798 · Security Note
• http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7978 · Security Note