QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2016-1550

Back to search

CVE-2016-1550

Published: Jan 6, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.

VendorProductVersions

NTP Project

NTP

affected
4.2.8p3
affected
4.2.8p4

NTPsec Project

NTPSec

affected
a5fb34b9cc89b92a8fef2f459004865c93bb7f92

References

USN-3096-1
vendor-advisory
x_refsource_UBUNTU
DSA-3629
vendor-advisory
x_refsource_DEBIAN
RHSA-2016:1141
vendor-advisory
x_refsource_REDHAT
SUSE-SU-2016:1912
vendor-advisory
x_refsource_SUSE
VU#718152
third-party-advisory
x_refsource_CERT-VN
RHSA-2016:1552
vendor-advisory
x_refsource_REDHAT
1035705
vdb-entry
x_refsource_SECTRACK
FreeBSD-SA-16:16
vendor-advisory
x_refsource_FREEBSD
88261
vdb-entry
x_refsource_BID
SUSE-SU-2016:2094
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2016:1423
vendor-advisory
x_refsource_SUSE
GLSA-201607-15
vendor-advisory
x_refsource_GENTOO
openSUSE-SU-2016:1329
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:1471
vendor-advisory
x_refsource_SUSE
FEDORA-2016-5b2eb0bf9c
vendor-advisory
x_refsource_FEDORA
SUSE-SU-2016:1291
vendor-advisory
x_refsource_SUSE
DSA-3629
vendor-advisory
x_refsource_DEBIAN
SUSE-SU-2016:1568
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:1278
vendor-advisory
x_refsource_SUSE
FEDORA-2016-ed8c6c0426
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now