CVE-2016-7429
ntp: Attack on interface selection
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a source) by sending a response for a source to an interface the source does not use.
NTP en versiones anteriores a 4.2.8p9 cambia la estructura de los pares a la interfaz que recibe la respuesta de una fuente, lo que permite a atacantes remotos provocar una denegación de servicio (prevenir la comunicación con una fuente) enviando una respuesta para una fuente a una interfaz que la fuente no utiliza.
A flaw was found in the way ntpd running on a host with multiple network interfaces handled certain server responses. A remote attacker could use this flaw which would cause ntpd to not synchronize with the source.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2016-09-09 CVE Reserved
- 2017-01-13 CVE Published
- 2024-04-15 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-18: DEPRECATED: Source Code
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html | X_refsource_confirm |
|
| http://www.securityfocus.com/bid/94453 | Vdb Entry | |
| http://www.securitytracker.com/id/1037354 | Vdb Entry | |
| https://bto.bluecoat.com/security-advisory/sa139 | X_refsource_confirm | |
| https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us | X_refsource_confirm | |
| https://www.kb.cert.org/vuls/id/633847 | Third Party Advisory |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://nwtime.org/ntp428p9_release | 2018-01-05 | |
| http://rhn.redhat.com/errata/RHSA-2017-0252.html | 2018-01-05 | |
| http://support.ntp.org/bin/view/Main/NtpBug3072 | 2018-01-05 | |
| http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities | 2018-01-05 | |
| https://access.redhat.com/security/cve/CVE-2016-7429 | 2017-02-06 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1397341 | 2017-02-06 |