PT-2017-8050 · Ntf+3 · Ntp+3

Yihan Lian · Published 2016-05-11 · Updated 2024-06-15 · CVE-2016-2517

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NTP versions 4.2.8p7 and earlier, 4.3.x before 4.3.92

Description The issue allows remote attackers to cause a denial of service by preventing subsequent authentication. This is achieved by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, controlkey, or requestkey. The vulnerability exists due to a regression of a previous issue.

Recommendations For NTP versions 4.2.8p7 and earlier: update to version 4.2.8p7 or later. For NTP versions 4.3.x before 4.3.92: update to version 4.3.92 or later. As a temporary workaround, consider restricting access to the ntpd service to minimize the risk of exploitation.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2017-2335

CVE-2016-2517

OPENSUSE-SU-2016_1329-1

OPENSUSE-SU-2024:10181-1

SUSE-SU-2016:1278-1

SUSE-SU-2016:1291-1

SUSE-SU-2016:1471-1

SUSE-SU-2016:1568-1

Affected Products

Alt Linux

Freebsd

Ntp

Suse

References · 105

• https://security.freebsd.org/advisories/FreeBSD-SA-16:16.ntp.asc · Vendor Advisory
• https://security.gentoo.org/glsa/201607-15 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2517 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-2517 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-2517 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2016:1278-1 · Vendor Advisory
• http://support.ntp.org/bin/view/Main/NtpBug3010 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-2517 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-2517 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1568-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1471-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-2517 · Security Note
• https://osv.dev/vulnerability/CVE-2016-2517 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1291-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10181-1 · Vendor Advisory