Description
ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 11 | ntp | 1:4.2.8p7+dfsg-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | ntp | No fix yet | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | ntp | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | ntp | 4.2.8p6-8.2 | SUSE-SU-2016:1177-1 |
| SLES 12 SP1 | yast2-ntp-client | 3.1.22-6.2 | SUSE-SU-2016:1177-1 |
| SLES 12 | ntp | 4.2.8p6-46.5.2 | SUSE-SU-2016:1247-1 |
| SLES 12 | yast2-ntp-client | 3.1.12.4-8.2 | SUSE-SU-2016:1247-1 |
| SLES 11 SP4 | ntp | 4.2.8p6-8.2 | SUSE-SU-2016:3193-1, SUSE-SU-2016:1175-1 |
| SLES 11 SP3 | ntp | 4.2.8p6-41.1 | SUSE-SU-2017:0255-1, SUSE-SU-2016:1311-1 |
| SLES 11 SP2 | ntp | 4.2.8p6-41.1 | SUSE-SU-2017:0255-1, SUSE-SU-2016:1311-1 |
| SLES 11 SP2 | yast2-ntp-client | 2.17.14.1-1.12.1 | SUSE-SU-2016:1311-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP1 | ntp | 4.2.8p6-8.2 | SUSE-SU-2016:1177-1 |
| SLES for SAP 12 SP1 | yast2-ntp-client | 3.1.22-6.2 | SUSE-SU-2016:1177-1 |
| SLES for SAP 12 | ntp | 4.2.8p6-46.5.2 | SUSE-SU-2016:1247-1 |
| SLES for SAP 12 | yast2-ntp-client | 3.1.12.4-8.2 | SUSE-SU-2016:1247-1 |
| SLES for SAP 11 SP4 | ntp | 4.2.8p6-8.2 | SUSE-SU-2016:3193-1, SUSE-SU-2016:1175-1 |
| SUSE OpenStack Cloud 5 | ntp | 4.2.8p6-41.1 | SUSE-SU-2017:0255-1, SUSE-SU-2016:1311-1 |
| SUSE Manager Proxy 2.1 | ntp | 4.2.8p6-41.1 | SUSE-SU-2017:0255-1, SUSE-SU-2016:1311-1 |
| SUSE Manager 2.1 | ntp | 4.2.8p6-41.1 | SUSE-SU-2017:0255-1, SUSE-SU-2016:1311-1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | ntp | 4.2.8p9-48.9.1 | SUSE-SU-2017:0255-1 |
Advisories 7
- SUSE-SU-2016:1311-1 Security update for ntp SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:1177-1 Security update for ntp SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:1247-1 Security update for ntp SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:3193-1 Security update for ntp SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:0255-1 Security update for ntp SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:1175-1 Security update for ntp SUSE / openSUSE Security Updates · Feb 4, 2026
- VDE-2022-032 AUMA: Multiple Vulnerabilities in Automation Runtime NTP Service CERT@VDE · Aug 9, 2022
References
- 20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016 vendor-advisory
- FEDORA-2016-c3bd6a3496 vendor-advisory
- SUSE-SU-2016:1177 vendor-advisory
- FEDORA-2016-89e0874533 vendor-advisory
- 1034782 vdb-entry
- openSUSE-SU-2016:1292 vendor-advisory
- VU#718152 third-party-advisory
- http://support.ntp.org/bin/view/Main/NtpBug2946
- SUSE-SU-2016:1247 vendor-advisory
- 82105 vdb-entry
- SUSE-SU-2016:1311 vendor-advisory
- FEDORA-2016-50b0066b7f vendor-advisory
- SUSE-SU-2016:1175 vendor-advisory
- FreeBSD-SA-16:09 vendor-advisory
- https://bto.bluecoat.com/security-advisory/sa113
- openSUSE-SU-2016:1423 vendor-advisory
- GLSA-201607-15 vendor-advisory
- https://security.netapp.com/advisory/ntap-20200204-0003/