CVE-2016-1549
Medium
Description
A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim's clock.
SeverityMedium
CVSS6.5
Exploit probability—
ProductNtp
PublishedJan 6, 2017
First seenJan 6, 2017
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ntp ntp | 4.2.8 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.