PT-2016-4857 · Ntpsec+8 · Ntpsec+10

Loganaden Velvindron + 2 · Published 2016-04-28 · Updated 2025-04-20 · CVE-2016-1550

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ntp versions 4.2.8p4 NTPSec version a5fb34b9cc89b92a8fef2f459004865c93bb7f92

Description An issue exists in the message authentication functionality of libntp, allowing an attacker to send crafted messages in an attempt to recover the message digest key. This could potentially be exploited by sending a series of crafted messages.

Recommendations For ntp version 4.2.8p4, consider updating to a version where this issue is resolved, as the current version is affected. For NTPSec version a5fb34b9cc89b92a8fef2f459004865c93bb7f92, restrict access to the message authentication functionality until a patch is available. As a temporary workaround, consider disabling the message authentication functionality in libntp until a patch is available.

Fix

DoS

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CESA-2016_1141

CVE-2016-1550

DLA-559-1

DSA-3629-1

MGASA-2016-0174

OPENSUSE-SU-2016_1329-1

OPENSUSE-SU-2024:10181-1

RHSA-2016:1141

RHSA-2016:1552

RHSA-2016_1141

SUSE-SU-2016:1278-1

SUSE-SU-2016:1291-1

SUSE-SU-2016:1471-1

SUSE-SU-2016:1568-1

USN-3096-1

Affected Products

Centos

Cisco Ios Xr

Cisco Nexus

Fortios

Freebsd

Ntpsec

Red Hat

Suse

Ubuntu

Libntp

Ntp

References · 160

• https://security.freebsd.org/advisories/FreeBSD-SA-16:16.ntp.asc · Vendor Advisory
• https://security.gentoo.org/glsa/201607-15 · Vendor Advisory
• http://debian.org/security/2016/dsa-3629 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-7976 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-1552.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-1550 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd · Vendor Advisory
• https://osv.dev/vulnerability/USN-3096-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-1550 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1550 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-4956 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html · Vendor Advisory