CVE Database
/

CVE-2016-1548

Back to search

CVE-2016-1548

Published: Jan 6, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched.

VendorProductVersions

NTP Project

NTP

affected
4.2.8p4

NTPsec Project

NTPSec

affected
aa48d001683e5b791a743ec9c575aaf7d867a2b0c

References

USN-3096-1
vendor-advisory
x_refsource_UBUNTU
DSA-3629
vendor-advisory
x_refsource_DEBIAN
RHSA-2016:1141
vendor-advisory
x_refsource_REDHAT
SUSE-SU-2016:1912
vendor-advisory
x_refsource_SUSE
88264
vdb-entry
x_refsource_BID
VU#718152
third-party-advisory
x_refsource_CERT-VN
RHSA-2016:1552
vendor-advisory
x_refsource_REDHAT
1035705
vdb-entry
x_refsource_SECTRACK
FreeBSD-SA-16:16
vendor-advisory
x_refsource_FREEBSD
SUSE-SU-2016:2094
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2016:1423
vendor-advisory
x_refsource_SUSE
GLSA-201607-15
vendor-advisory
x_refsource_GENTOO
openSUSE-SU-2016:1329
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:1471
vendor-advisory
x_refsource_SUSE
FEDORA-2016-5b2eb0bf9c
vendor-advisory
x_refsource_FEDORA
SUSE-SU-2016:1291
vendor-advisory
x_refsource_SUSE
DSA-3629
vendor-advisory
x_refsource_DEBIAN
SUSE-SU-2016:1568
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:1278
vendor-advisory
x_refsource_SUSE
FEDORA-2016-ed8c6c0426
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now