1. CVE-Search
  2. CVE-2016-4957
ID CVE-2016-4957
Summary ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.
References
Vulnerable Configurations
  • cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*
    cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*
  • cpe:2.3:a:ntp:ntp:4.3.92:*:*:*:*:*:*:*
    cpe:2.3:a:ntp:ntp:4.3.92:*:*:*:*:*:*:*
  • cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*
    cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*
  • cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*
    cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*
  • cpe:2.3:a:suse:manager_proxy:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:suse:manager_proxy:2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*
    cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*
  • cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:*
    cpe:2.3:o:novell:suse_manager:2.1:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
    cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
    cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*
    cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*
    cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*
    cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*
    cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*
    cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 18-06-2020 - 18:07)
Impact:
Exploitability:
CWE CWE-476
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
cert-vn VU#321640
confirm
freebsd FreeBSD-SA-16:24
gentoo GLSA-201607-15
sectrack 1036037
suse
  • SUSE-SU-2016:1563
  • SUSE-SU-2016:1584
  • SUSE-SU-2016:1602
  • openSUSE-SU-2016:1583
  • openSUSE-SU-2016:1636
Last major update 18-06-2020 - 18:07
Published 05-07-2016 - 01:59
Last modified 18-06-2020 - 18:07
Back to Top