CVE-2016-7427
CVE-2016-7427
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via a crafted broadcast mode packet.
CVSS 4.3 · Medium · EPSS 3.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ntp Debian:11
- Affected ranges
- ECOSYSTEM: < 1:4.2.8p9+dfsg-1
Update to 1:4.2.8p9+dfsg-1
ntp Ubuntu:14.04:LTS
- Versions
- 1:4.2.6.p5+dfsg-3ubuntu2
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.1
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.2
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.3
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.6
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.7
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.8
- 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10
- Affected ranges
- ECOSYSTEM: < 1:4.2.6.p5+dfsg-3ubuntu2.14.04.11
Update to 1:4.2.6.p5+dfsg-3ubuntu2.14.04.11
ntp Ubuntu:16.04:LTS
- Versions
- 1:4.2.6.p5+dfsg-3ubuntu8
- 1:4.2.6.p5+dfsg-3ubuntu8.1
- 1:4.2.6.p5+dfsg-3ubuntu9
- 1:4.2.8p4+dfsg-3ubuntu1
- 1:4.2.8p4+dfsg-3ubuntu2
- 1:4.2.8p4+dfsg-3ubuntu3
- 1:4.2.8p4+dfsg-3ubuntu4
- 1:4.2.8p4+dfsg-3ubuntu5
- 1:4.2.8p4+dfsg-3ubuntu5.1
- 1:4.2.8p4+dfsg-3ubuntu5.2
- 1:4.2.8p4+dfsg-3ubuntu5.3
- 1:4.2.8p4+dfsg-3ubuntu5.4
- Affected ranges
- ECOSYSTEM: < 1:4.2.8p4+dfsg-3ubuntu5.5
Update to 1:4.2.8p4+dfsg-3ubuntu5.5
Original sources
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us
- https://usn.ubuntu.com/3707-2/
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_us
- http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
- http://nwtime.org/ntp428p9_release/
- http://support.ntp.org/bin/view/Main/NtpBug3114
- https://www.kb.cert.org/vuls/id/633847
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03899en_us
- http://www.securitytracker.com/id/1037354
- https://bto.bluecoat.com/security-advisory/sa139
- https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc
- http://www.securityfocus.com/bid/94447
- https://nvd.nist.gov/vuln/detail/CVE-2016-7427