CVE-2016-1548
High
Description
An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched.
SeverityHigh
CVSS7.2
Exploit probability90. percentile3.8%
ProductNtp
PublishedJan 6, 2017
First seenJan 6, 2017
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ntp ntp | 4.2.8 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.