Summary
[4.2.6p5-10.el6_8.1]
- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
(CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ntp | 0:4.2.6p5-22.el7_2.2 |
| Oracle Linux · 7 | ntp-doc | 0:4.2.6p5-22.el7_2.2 |
| Oracle Linux · 7 | ntp-perl | 0:4.2.6p5-22.el7_2.2 |
| Oracle Linux · 7 | ntpdate | 0:4.2.6p5-22.el7_2.2 |
| Oracle Linux · 7 | sntp | 0:4.2.6p5-22.el7_2.2 |
Vulnerabilities 5
-
Unscored —CVE-2015-7979 EPSS 12%
NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server associat…
-
Unscored —
An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec…
-
Unscored —
An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timest…
-
Unscored —
An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5f…
-
Unscored —CVE-2016-2518 EPSS 15%
The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-…