Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-1547

Опубликовано: 06 янв. 2017
Источник: nvd
CVSS3: 5.3
CVSS2: 5
EPSS Низкий

Описание

An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ntp:ntp:*:p4:*:*:*:*:*:*
Версия до 4.2.8 (включая)

EPSS

Процентиль: 79%
0.01275
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 8 лет назад

An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.

redhat
больше 9 лет назад

An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.

CVSS3: 5.3
debian
больше 8 лет назад

An off-path attacker can cause a preemptible client association to be ...

CVSS3: 5.3
github
больше 3 лет назад

An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.

oracle-oval
около 9 лет назад

ELSA-2016-1141: ntp security update (MODERATE)

EPSS

Процентиль: 79%
0.01275
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20