Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

None

Privileges Required

None

Attack Vector

Network

0

CVE-2016-4956

Disclosure Date: July 05, 2016 •

CVE-2016-4956 CVSS v3 Base Score: 5.3

MITRE ATT&CK

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

5.3 Medium

Impact Score:

1.4

Exploitability Score:

3.9

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector (AV):

Network

Attack Complexity (AC):

Low

Privileges Required (PR):

None

User Interaction (UI):

None

Scope (S):

Unchanged

Confidentiality (C):

None

Integrity (I):

None

Availability (A):

Low

Vendors

novell,
ntp,
opensuse,
oracle,
siemens,
suse

Products

leap 42.1,
linux enterprise desktop 12,
linux enterprise server 11,
linux enterprise server 12,
manager proxy 2.1,
ntp,
ntp 4.2.8,
openstack cloud 5,
opensuse 13.2,
simatic net cp 443-1 opc ua firmware,
solaris 10,
solaris 11.3,
suse manager 2.1

References

Canonical

CVE-2016-4956 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4956)

BID-91009 (http://www.securityfocus.com/bid/91009)

Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03757en_us

SECTRACK-1036037 (http://www.securitytracker.com/id/1036037)

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

http://support.ntp.org/bin/view/Main/NtpBug3042

http://bugs.ntp.org/3042

VU#321640 (http://www.kb.cert.org/vuls/id/321640)

http://support.ntp.org/bin/view/Main/SecurityNotice

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html

GLSA-201607-15 (https://security.gentoo.org/glsa/201607-15)

https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf

USN-3096-1 (http://www.ubuntu.com/usn/USN-3096-1)

FEDORA-2016-c3bd6a3496 (https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/)

SUSE-SU-2016:1912 (http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html)

FEDORA-2016-89e0874533 (https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/)

SUSE-SU-2016:2094 (http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html)

FEDORA-2016-50b0066b7f (https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/)

20160603 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: June 2016 (http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpd)

20170607 [security bulletin] HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (DoS) (http://www.securityfocus.com/archive/1/540683/100/0/threaded)

SUSE-SU-2016:1568 (http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html)

20160604 [slackware-security] ntp (SSA:2016-155-01) (http://www.securityfocus.com/archive/1/538599/100/0/threaded)

20170607 [security bulletin] HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (DoS) (http://www.securityfocus.com/archive/1/archive/1/540683/100/0/threaded)

20160604 FreeBSD Security Advisory FreeBSD-SA-16:24.ntp (http://www.securityfocus.com/archive/1/538600/100/0/threaded)

VU#321640 (https://www.kb.cert.org/vuls/id/321640)

20160604 [slackware-security] ntp (SSA:2016-155-01) (http://www.securityfocus.com/archive/1/archive/1/538599/100/0/threaded)

20160604 FreeBSD Security Advisory FreeBSD-SA-16:24.ntp (http://www.securityfocus.com/archive/1/archive/1/538600/100/0/threaded)

Miscellaneous

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc

http://packetstormsecurity.com/files/137321/Slackware-Security-Advisory-ntp-Updates.html

https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11

Rapid7

Technical Analysis