Vulnerability Details : CVE-2016-1550
An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.
Vulnerability category: Information leak
Exploit prediction scoring system (EPSS) score for CVE-2016-1550
Probability of exploitation activity in the next 30 days: 0.49%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 76 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2016-1550
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
|
5.3
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
3.9
|
1.4
|
NIST |
CWE ids for CVE-2016-1550
-
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-1550
-
http://packetstormsecurity.com/files/136864/Slackware-Security-Advisory-ntp-Updates.html
Slackware Security Advisory - ntp Updates ≈ Packet Storm
-
http://www.securityfocus.com/bid/88261
NTP CVE-2016-1550 Local Security Bypass Vulnerability
-
https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0084
TALOS-2016-0084 || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence
- https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf
-
https://security.netapp.com/advisory/ntap-20171004-0002/
April 2016 Network Time Protocol Daemon (ntpd) Vulnerabilities in Multiple NetApp Products | NetApp Product Security
-
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html
[security-announce] SUSE-SU-2016:1471-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists
-
http://www.talosintelligence.com/reports/TALOS-2016-0084/
TALOS-2016-0084 || Cisco Talos Intelligence Group - Comprehensive Threat IntelligenceTechnical Description;Third Party Advisory
-
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd
Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: April 2016
-
http://rhn.redhat.com/errata/RHSA-2016-1552.html
RHSA-2016:1552 - Security Advisory - Red Hat Customer Portal
-
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html
[security-announce] openSUSE-SU-2016:1329-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists
-
https://security.gentoo.org/glsa/201607-15
NTP: Multiple vulnerabilities (GLSA 201607-15) — Gentoo security
-
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
Oracle Solaris Bulletin - April 2016
-
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html
[security-announce] SUSE-SU-2016:1278-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists
-
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.html
[SECURITY] Fedora 24 Update: ntp-4.2.6p5-40.fc24
-
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html
[security-announce] SUSE-SU-2016:1568-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists
-
https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11
Siemens TIM 4R-IE Devices | CISA
-
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html
[security-announce] SUSE-SU-2016:1291-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists
-
https://access.redhat.com/errata/RHSA-2016:1141
RHSA-2016:1141 - Security Advisory - Red Hat Customer Portal
-
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
Oracle Linux Bulletin - April 2016
-
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html
[security-announce] SUSE-SU-2016:1912-1: important: Security update for
- https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc
-
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html
[security-announce] SUSE-SU-2016:2094-1: important: Security update for
-
https://www.debian.org/security/2016/dsa-3629
Debian -- Security Information -- DSA-3629-1 ntp
- https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf
-
http://www.securityfocus.com/archive/1/archive/1/538233/100/0/threaded
SecurityFocus
-
https://www.kb.cert.org/vuls/id/718152
VU#718152 - NTP.org ntpd contains multiple vulnerabilities
-
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html
[SECURITY] Fedora 23 Update: ntp-4.2.6p5-40.fc23
-
http://www.ubuntu.com/usn/USN-3096-1
USN-3096-1: NTP vulnerabilities | Ubuntu security notices
-
https://www.arista.com/en/support/advisories-notices/security-advisories/1332-security-advisory-19
Security Advisory 0019 - Arista
-
http://www.securitytracker.com/id/1035705
ntp Multiple Bugs Let Remote Users Spoof Messages, Obtain Potentially Sensitive Information, Modify Time, and Deny Service - SecurityTracker
-
http://www.securityfocus.com/archive/1/538233/100/0/threaded
SecurityFocus
-
http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html
openSUSE-SU-2016:1423-1: moderate: Security update for ntp
-
https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
Siemens SIMATIC NET CP 443-1 OPC UA | CISA
-
http://www.debian.org/security/2016/dsa-3629
Debian -- Security Information -- DSA-3629-1 ntp
Products affected by CVE-2016-1550
- cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*