CVE-2016-9042
Medium
Description
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
SeverityMedium
CVSS5.9
Exploit probability—
Product
Ntp
PublishedJun 4, 2018
First seenJun 4, 2018
How to fix
Update
- hpe hpux-ntpc.4.2.8.4.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ntp ntp | 4.2.8 | — |
| freebsd freebsd | 10.0, 11.0 | — |
| hpe hpux-ntp | v < c.4.2.8.4.0 | c.4.2.8.4.0 |
| siemens simatic_net_cp_443-1_opc_ua_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.