Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-1549

A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160d

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
certcc

Description

A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim's clock.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NTP Project NTP

  • 4.2.8p3affected
  • 4.2.8p4affected

NTPsec Project NTPSec

  • 3e160db8dc248a0bcb053b56a80167dc742d2b74affected
  • a5fb34b9cc89b92a8fef2f459004865c93bb7f92affected

References