High severity · published Jul 5, 2016
CVE-2016-4953
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect…
7.5
CVSS
17.2%
EPSS
No
On KEV
Description
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)17.2% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LE
Leap · Opensuse
42.1 · source: NVD
LE
Linux Enterprise Desktop · Suse
12 · source: NVD
LE
Linux Enterprise Server · Suse
11; 11; 11; 12 · source: NVD
MA
Manager · Suse
2.1 · source: NVD
MP
Manager Proxy · Suse
2.1 · source: NVD
NT
Ntp · Ntp
4.2.0 before 4.2.8; 4.3.0 before 4.3.93; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +17 more · source: NVD
OC
Openstack Cloud · Suse
5 · source: NVD
OP
Opensuse · Opensuse
13.2 · source: NVD
SN
Simatic Net CP 443-1 Opc UA Firmware · Siemens
All versions, or not specified · source: NVD
SO
Solaris · Oracle
10; 11.3 · source: NVD
T4
Tim 4r-ie Dnp3 Firmware · Siemens
All versions, or not specified · source: NVD
T4
Tim 4r-ie Firmware · Siemens
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-4953
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-4953
Issue Tracking
http://bugs.ntp.org/3045
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html
More from Ntp
9.8
CVE-2018-12327
Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the…
9.8
CVE-2018-7183
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a…
9.8
CVE-2015-7871
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication
9.8
CVE-2015-7853
The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service…
9.8
CVE-2015-7705
The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests