Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

None

Privileges Required

None

Attack Vector

Network

0

CVE-2016-4953

Disclosure Date: July 05, 2016 •

CVE-2016-4953 CVSS v3 Base Score: 7.5

MITRE ATT&CK

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

7.5 High

Impact Score:

3.6

Exploitability Score:

3.9

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector (AV):

Network

Attack Complexity (AC):

Low

Privileges Required (PR):

None

User Interaction (UI):

None

Scope (S):

Unchanged

Confidentiality (C):

None

Integrity (I):

None

Availability (A):

High

Vendors

ntp,
opensuse,
oracle,
siemens,
suse

Products

leap 42.1,
linux enterprise desktop 12,
linux enterprise server 11,
linux enterprise server 12,
manager 2.1,
manager proxy 2.1,
ntp,
ntp 4.2.8,
openstack cloud 5,
opensuse 13.2,
simatic net cp 443-1 opc ua firmware,
solaris 10,
solaris 11.3,
tim 4r-ie dnp3 firmware,
tim 4r-ie firmware

References

Canonical

CVE-2016-4953 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4953)

BID-91010 (http://www.securityfocus.com/bid/91010)

Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00028.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00023.html

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03757en_us

http://support.ntp.org/bin/view/Main/NtpBug3045

SECTRACK-1036037 (http://www.securitytracker.com/id/1036037)

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00024.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

VU#321640 (http://www.kb.cert.org/vuls/id/321640)

http://support.ntp.org/bin/view/Main/SecurityNotice

http://bugs.ntp.org/3045

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00040.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00018.html

GLSA-201607-15 (https://security.gentoo.org/glsa/201607-15)

https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf

https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11

https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf

SUSE-SU-2016:1912 (http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html)

SUSE-SU-2016:2094 (http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html)

20160603 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: June 2016 (http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160603-ntpd)

20170607 [security bulletin] HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (DoS) (http://www.securityfocus.com/archive/1/540683/100/0/threaded)

SUSE-SU-2016:1568 (http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html)

20160604 [slackware-security] ntp (SSA:2016-155-01) (http://www.securityfocus.com/archive/1/538599/100/0/threaded)

20170607 [security bulletin] HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (DoS) (http://www.securityfocus.com/archive/1/archive/1/540683/100/0/threaded)

20160604 FreeBSD Security Advisory FreeBSD-SA-16:24.ntp (http://www.securityfocus.com/archive/1/538600/100/0/threaded)

VU#321640 (https://www.kb.cert.org/vuls/id/321640)

20160604 [slackware-security] ntp (SSA:2016-155-01) (http://www.securityfocus.com/archive/1/archive/1/538599/100/0/threaded)

20160604 FreeBSD Security Advisory FreeBSD-SA-16:24.ntp (http://www.securityfocus.com/archive/1/archive/1/538600/100/0/threaded)

Miscellaneous

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:24.ntp.asc

http://packetstormsecurity.com/files/137321/Slackware-Security-Advisory-ntp-Updates.html

http://packetstormsecurity.com/files/137322/FreeBSD-Security-Advisory-FreeBSD-SA-16-24.ntp.html

https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11

Rapid7

Technical Analysis