NVD

Id
20392  
Name
CVE-2016-4954  
Description
The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-06-12  
Published
2016-07-04  
Modified Date
2017-06-08  
Seq
2016-4954  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111457 20392 CVE-2016-4954 http://bugs.ntp.org/3044  View
111458 20392 CVE-2016-4954 SUSE-SU-2016:1563  View
111459 20392 CVE-2016-4954 openSUSE-SU-2016:1583  View
111460 20392 CVE-2016-4954 SUSE-SU-2016:1584  View
111461 20392 CVE-2016-4954 SUSE-SU-2016:1602  View
111462 20392 CVE-2016-4954 openSUSE-SU-2016:1636  View
111463 20392 CVE-2016-4954 http://support.ntp.org/bin/view/Main/NtpBug3044  View
111464 20392 CVE-2016-4954 http://support.ntp.org/bin/view/Main/SecurityNotice  View
111465 20392 CVE-2016-4954 VU#321640  View
111466 20392 CVE-2016-4954 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2703 JVNDB-2016-003476 NTP の ntpd の ntp_proto.c 内の process_packet 関数におけるサービス運用妨害 (DoS) の脆弱性 NTP の ntpd の ntp_proto.c 内の process_packet 関数には、サービス運用妨害 (ピア変数の変更) 状態にされる脆弱性が存在します。 CVE-2016-4954 91460 CVE-2016-4954 20392 4.3 4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003476.html 2016-06-02 2016-11-21 View