An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.03127.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
NTP Project NTP affected
Version Status Constraints
4.2.8p3 affected —
4.2.8p4 affected —
NTPsec Project NTPSec affected
Version Status Constraints
a5fb34b9cc89b92a8fef2f459004865c93bb7f92 affected —

Configuration 1 [-]

cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 6
ntp-0:4.2.6p5-10.el6.1 cpe:/o:redhat:enterprise_linux:6 RHSA-2016:1141 2016-05-31T00:00:00Z
Red Hat Enterprise Linux 6.7 Extended Update Support
ntp-0:4.2.6p5-5.el6_7.5 cpe:/o:redhat:rhel_eus:6.7 RHSA-2016:1552 2016-08-03T00:00:00Z
Red Hat Enterprise Linux 7
ntp-0:4.2.6p5-22.el7_2.2 cpe:/o:redhat:enterprise_linux:7 RHSA-2016:1141 2016-05-31T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Ntp Subscribe
Ntp Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Rhel Eus Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-559-1 ntp security update
Debian DSA Debian DSA DSA-3629-1 ntp security update
EUVD EUVD EUVD-2016-2645 An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.
Ubuntu USN Ubuntu USN USN-3096-1 NTP vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html cve-icon cve-icon
http://packetstormsecurity.com/files/136864/Slackware-Security-Advisory-ntp-Updates.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2016-1552.html cve-icon cve-icon
http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security cve-icon
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd cve-icon cve-icon
http://www.debian.org/security/2016/dsa-3629 cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html cve-icon cve-icon
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/538233/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/archive/1/538233/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/88261 cve-icon cve-icon
http://www.securitytracker.com/id/1035705 cve-icon cve-icon
http://www.talosintel.com/reports/TALOS-2016-0084/ cve-icon
http://www.talosintelligence.com/reports/TALOS-2016-0084/ cve-icon cve-icon
http://www.ubuntu.com/usn/USN-3096-1 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2016:1141 cve-icon cve-icon
https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf cve-icon cve-icon
https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2016-1550 cve-icon
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc cve-icon cve-icon
https://security.gentoo.org/glsa/201607-15 cve-icon cve-icon
https://security.netapp.com/advisory/ntap-20171004-0002/ cve-icon cve-icon
https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11 cve-icon cve-icon
https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11 cve-icon cve-icon
https://www.arista.com/en/support/advisories-notices/security-advisories/1332-security-advisory-19 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2016-1550 cve-icon
https://www.debian.org/security/2016/dsa-3629 cve-icon cve-icon
https://www.kb.cert.org/vuls/id/718152 cve-icon cve-icon
https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0084 cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published:

Updated: 2024-08-05T23:02:11.957Z

Reserved: 2016-01-07T00:00:00.000Z

Link: CVE-2016-1550

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2017-01-06T21:59:00.413

Modified: 2025-04-20T01:37:25.860

Link: CVE-2016-1550

cve-icon Redhat

Severity : Low

Publid Date: 2016-04-26T00:00:00Z

Links: CVE-2016-1550 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses