Red Hat Security AdvisoryRHSA-2016:1552
ntp security update
Released 2016-08-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux HPC Node EUS (v. 6.7) ntp-4.2.6p5-5.el6_7.5, ntpdate-4.2.6p5-5.el6_7.5
- Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) ntp-doc-4.2.6p5-5.el6_7.5, ntp-perl-4.2.6p5-5.el6_7.5
- Red Hat Enterprise Linux Server EUS (v. 6.7) ntp-4.2.6p5-5.el6_7.5, ntpdate-4.2.6p5-5.el6_7.5
- Red Hat Enterprise Linux Server Optional EUS (v. 6.7) ntp-doc-4.2.6p5-5.el6_7.5, ntp-perl-4.2.6p5-5.el6_7.5
Fixes 5 records
Priority MEDIUM 47
NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.11887 · Published 2017-01-30 · Partial fix CWE-19
Priority MEDIUM 40
The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.15081 · Published 2017-01-30 · Fixed CWE-125
Priority LOW 38
An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server.
CVSS 3.0HIGH 7.2· Network · No auth · No interaction · EPSS 0.03812 · Published 2017-01-06 · Fixed CWE-19
Priority LOW 32
An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a sp…
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.05068 · Published 2017-01-06 · Partial fix CWE-20
Priority LOW 30
An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03604 · Published 2017-01-06 · Partial fix CWE-200
THREATIST.IORead the docs