NVD

Id
20393  
Name
CVE-2016-4955  
Description
ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-07-04  
Modified Date
2016-11-28  
Seq
2016-4955  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111467 20393 CVE-2016-4955 http://bugs.ntp.org/3043  View
111468 20393 CVE-2016-4955 SUSE-SU-2016:1563  View
111469 20393 CVE-2016-4955 openSUSE-SU-2016:1583  View
111470 20393 CVE-2016-4955 SUSE-SU-2016:1584  View
111471 20393 CVE-2016-4955 SUSE-SU-2016:1602  View
111472 20393 CVE-2016-4955 openSUSE-SU-2016:1636  View
111473 20393 CVE-2016-4955 http://support.ntp.org/bin/view/Main/NtpBug3043  View
111474 20393 CVE-2016-4955 http://support.ntp.org/bin/view/Main/SecurityNotice  View
111475 20393 CVE-2016-4955 VU#321640  View
111476 20393 CVE-2016-4955 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
111477 20393 CVE-2016-4955 91007  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2704 JVNDB-2016-003477 NTP の ntpd におけるサービス運用妨害 (DoS) の脆弱性 NTP の ntpd には、autokey が有効になっている場合、サービス運用妨害 (ピア変数の消去および時刻同期 (association) の停止) 状態にされる脆弱性が存在します。 CVE-2016-4955 91461 CVE-2016-4955 20393 2.6 4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003477.html 2016-06-02 2016-11-18 View