CVE

Id
89336  
CVE No.
CVE-2016-2517  
Status
Candidate  
Description
NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, controlkey, or requestkey. NOTE: this vulnerability exists because of a CVE-2016-2516 regression.  
Phase
Assigned (20160220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
775110 89336 CVE-2016-2517 CONFIRM:http://support.ntp.org/bin/view/Main/NtpBug3010  View
775111 89336 CVE-2016-2517 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
775112 89336 CVE-2016-2517 CERT-VN:VU#718152  View
775113 89336 CVE-2016-2517 URL:https://www.kb.cert.org/vuls/id/718152  View
775114 89336 CVE-2016-2517 BID:88189  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3364 JVNDB-2016-004137 Mozilla Firefox におけるユーザを追跡される脆弱性 Mozilla Firefox は、関連のブラウザウィンドウが閉じられた後も favicon のリソース取り込みに使用されたネットワーク接続が持続されているため、ユーザを追跡される脆弱性が存在します。 CVE-2016-2830 89336 4.3 4.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004137.html  View