Red Hat Security Advisory: ntp security update

Fixed packages 10

Vulnerabilities 5

• Unscored —
  CVE-2015-7979 EPSS 12%

  NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server associat…

  ntp ntp Debian Ubuntu
  Jan 30, 2017
• Unscored —
  CVE-2016-1547

  An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec…

  NTPsec NTP Project ntpsec NTP Debian Ubuntu
  Jan 6, 2017
• Unscored —
  CVE-2016-1548

  An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timest…

  NTPsec NTP Project ntpsec NTP Debian Ubuntu
  Jan 6, 2017
• Unscored —
  CVE-2016-1550

  An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5f…

  NTPsec NTP Project ntpsec NTP Debian Ubuntu
  Jan 6, 2017
• Unscored —
  CVE-2016-2518 EPSS 15%

  The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-…

  ntp ntp Debian Ubuntu
  Jan 30, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1300271
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1331461
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1331462
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1331464
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1331468
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1552.json
• report
  https://access.redhat.com/security/cve/CVE-2015-7979
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-7979
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-7979
• article
  http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p6_Securit
• article
  http://www.talosintel.com/reports/TALOS-2016-0076/
• report
  https://access.redhat.com/security/cve/CVE-2016-1547
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1547
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1547
• article
  http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security
• article
  http://www.talosintel.com/reports/TALOS-2016-0081/
• report
  https://access.redhat.com/security/cve/CVE-2016-1548
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1548
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1548
• article
  http://www.talosintel.com/reports/TALOS-2016-0082/
• report
  https://access.redhat.com/security/cve/CVE-2016-1550
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-1550
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-1550
• article
  http://www.talosintel.com/reports/TALOS-2016-0084/
• report
  https://access.redhat.com/security/cve/CVE-2016-2518
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-2518
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-2518