CVE-2016-7431
CVE-2016-7431
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.
CVSS 5.3 · Medium · EPSS 8.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_us
- http://www.securityfocus.com/bid/94454
- http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
- http://nwtime.org/ntp428p9_release/
- https://www.kb.cert.org/vuls/id/633847
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03899en_us
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.securitytracker.com/id/1037354
- https://bto.bluecoat.com/security-advisory/sa139
- https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc
- http://support.ntp.org/bin/view/Main/NtpBug3102
- http://www.securityfocus.com/archive/1/540254/100/0/threaded
- http://www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03899en_us
- http://www.ubuntu.com/usn/USN-3349-1
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03883en_us
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-223/
- http://www.securityfocus.com/archive/1/539955/100/0/threaded
- http://packetstormsecurity.com/files/140240/FreeBSD-Security-Advisory-FreeBSD-SA-16.39.ntp.html
- http://www.securityfocus.com/archive/1/archive/1/539955/100/0/threaded
- https://nvd.nist.gov/vuln/detail/CVE-2016-7431