csaf_suse - suse-su-2017:0255-1

suse-su-2017:0255-1

Vulnerability from csaf_suse

Published

2017-01-23 11:27

Modified

2017-01-23 11:27

Summary

Security update for ntp

Notes

Title of the patch

Security update for ntp

Description of the patch

This update for ntp fixes the following issues: ntp was updated to 4.2.8p9. Security issues fixed: - CVE-2016-9311, CVE-2016-9310, bsc#1011377: Mode 6 unauthenticated trap information disclosure and DDoS vector. - CVE-2016-7427, bsc#1011390: Broadcast Mode Replay Prevention DoS. - CVE-2016-7428, bsc#1011417: Broadcast Mode Poll Interval Enforcement DoS. - CVE-2016-7431, bsc#1011395: Regression: 010-origin: Zero Origin Timestamp Bypass. - CVE-2016-7434, bsc#1011398: Null pointer dereference in _IO_str_init_static_internal(). - CVE-2016-7429, bsc#1011404: Interface selection attack. - CVE-2016-7426, bsc#1011406: Client rate limiting and server responses. - CVE-2016-7433, bsc#1011411: Reboot sync calculation problem. - CVE-2015-8140: ntpq vulnerable to replay attacks. - CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin. - CVE-2015-5219: An endless loop due to incorrect precision to double conversion (bsc#943216). Non-security issues fixed: - Fix a spurious error message. - Other bugfixes, see /usr/share/doc/packages/ntp/ChangeLog. - Fix a regression in 'trap' (bsc#981252). - Reduce the number of netlink groups to listen on for changes to the local network setup (bsc#992606). - Fix segfault in 'sntp -a' (bsc#1009434). - Silence an OpenSSL version warning (bsc#992038). - Make the resolver task change user and group IDs to the same values as the main task. (bsc#988028) - Simplify ntpd's search for its own executable to prevent AppArmor warnings (bsc#956365).

Patchnames

sleclo50sp3-ntp-12953,sleman21-ntp-12953,slemap21-ntp-12953,sleposp3-ntp-12953,slessp2-ntp-12953,slessp3-ntp-12953

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for ntp",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update for ntp fixes the following issues:\n\nntp was updated to 4.2.8p9.\n\nSecurity issues fixed:\n\n- CVE-2016-9311, CVE-2016-9310, bsc#1011377: Mode 6\n  unauthenticated trap information disclosure and DDoS vector.\n- CVE-2016-7427, bsc#1011390:\n  Broadcast Mode Replay Prevention DoS.\n- CVE-2016-7428, bsc#1011417:\n  Broadcast Mode Poll Interval Enforcement DoS.\n- CVE-2016-7431, bsc#1011395:\n  Regression: 010-origin: Zero Origin Timestamp Bypass.\n- CVE-2016-7434, bsc#1011398:\n  Null pointer dereference in _IO_str_init_static_internal().\n- CVE-2016-7429, bsc#1011404: Interface selection attack.\n- CVE-2016-7426, bsc#1011406:\n  Client rate limiting and server responses.\n- CVE-2016-7433, bsc#1011411: Reboot sync calculation problem.\n- CVE-2015-8140: ntpq vulnerable to replay attacks.\n- CVE-2015-8139: Origin Leak: ntpq and ntpdc, disclose origin.\n- CVE-2015-5219: An endless loop due to incorrect precision to\n  double conversion (bsc#943216).\n\nNon-security issues fixed:\n\n- Fix a spurious error message.\n- Other bugfixes, see /usr/share/doc/packages/ntp/ChangeLog.\n- Fix a regression in \u0027trap\u0027 (bsc#981252).\n- Reduce the number of netlink groups to listen on for changes to\n  the local network setup (bsc#992606).\n- Fix segfault in \u0027sntp -a\u0027 (bsc#1009434).\n- Silence an OpenSSL version warning (bsc#992038).\n- Make the resolver task change user and group IDs to the same\n  values as the main task. (bsc#988028)\n- Simplify ntpd\u0027s search for its own executable to prevent AppArmor\n  warnings (bsc#956365).\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sleclo50sp3-ntp-12953,sleman21-ntp-12953,slemap21-ntp-12953,sleposp3-ntp-12953,slessp2-ntp-12953,slessp3-ntp-12953",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_0255-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:0255-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170255-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:0255-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-January/002589.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1009434",
        "url": "https://bugzilla.suse.com/1009434"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1011377",
        "url": "https://bugzilla.suse.com/1011377"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1011390",
        "url": "https://bugzilla.suse.com/1011390"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1011395",
        "url": "https://bugzilla.suse.com/1011395"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1011398",
        "url": "https://bugzilla.suse.com/1011398"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1011404",
        "url": "https://bugzilla.suse.com/1011404"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1011406",
        "url": "https://bugzilla.suse.com/1011406"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1011411",
        "url": "https://bugzilla.suse.com/1011411"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1011417",
        "url": "https://bugzilla.suse.com/1011417"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 943216",
        "url": "https://bugzilla.suse.com/943216"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 956365",
        "url": "https://bugzilla.suse.com/956365"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 981252",
        "url": "https://bugzilla.suse.com/981252"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 988028",
        "url": "https://bugzilla.suse.com/988028"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 992038",
        "url": "https://bugzilla.suse.com/992038"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 992606",
        "url": "https://bugzilla.suse.com/992606"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-5219 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-5219/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8139 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8139/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8140 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8140/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7426 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7426/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7427 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7427/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7428 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7428/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7429 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7429/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7431 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7431/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7433 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7433/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7434 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7434/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9310 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9310/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9311 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9311/"
      }
    ],
    "title": "Security update for ntp",
    "tracking": {
      "current_release_date": "2017-01-23T11:27:30Z",
      "generator": {
        "date": "2017-01-23T11:27:30Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:0255-1",
      "initial_release_date": "2017-01-23T11:27:30Z",
      "revision_history": [
        {
          "date": "2017-01-23T11:27:30Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p9-48.9.1.i586",
                "product": {
                  "name": "ntp-4.2.8p9-48.9.1.i586",
                  "product_id": "ntp-4.2.8p9-48.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p9-48.9.1.i586",
                "product": {
                  "name": "ntp-doc-4.2.8p9-48.9.1.i586",
                  "product_id": "ntp-doc-4.2.8p9-48.9.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p9-48.9.1.s390x",
                "product": {
                  "name": "ntp-4.2.8p9-48.9.1.s390x",
                  "product_id": "ntp-4.2.8p9-48.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p9-48.9.1.s390x",
                "product": {
                  "name": "ntp-doc-4.2.8p9-48.9.1.s390x",
                  "product_id": "ntp-doc-4.2.8p9-48.9.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ntp-4.2.8p9-48.9.1.x86_64",
                "product": {
                  "name": "ntp-4.2.8p9-48.9.1.x86_64",
                  "product_id": "ntp-4.2.8p9-48.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ntp-doc-4.2.8p9-48.9.1.x86_64",
                "product": {
                  "name": "ntp-doc-4.2.8p9-48.9.1.x86_64",
                  "product_id": "ntp-doc-4.2.8p9-48.9.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 5",
                "product": {
                  "name": "SUSE OpenStack Cloud 5",
                  "product_id": "SUSE OpenStack Cloud 5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:cloud:5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager 2.1",
                "product": {
                  "name": "SUSE Manager 2.1",
                  "product_id": "SUSE Manager 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-server:2.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Proxy 2.1",
                "product": {
                  "name": "SUSE Manager Proxy 2.1",
                  "product_id": "SUSE Manager Proxy 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-proxy:2.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Point of Sale 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Point of Sale 11 SP3",
                  "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-pos:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles_ltss:11:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles_ltss:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:11:sp3:teradata"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-48.9.1.x86_64 as component of SUSE OpenStack Cloud 5",
          "product_id": "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p9-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-48.9.1.x86_64 as component of SUSE OpenStack Cloud 5",
          "product_id": "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p9-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-48.9.1.s390x as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x"
        },
        "product_reference": "ntp-4.2.8p9-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-48.9.1.x86_64 as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p9-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-48.9.1.s390x as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p9-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-48.9.1.x86_64 as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p9-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-48.9.1.x86_64 as component of SUSE Manager Proxy 2.1",
          "product_id": "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p9-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-48.9.1.x86_64 as component of SUSE Manager Proxy 2.1",
          "product_id": "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p9-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-48.9.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586"
        },
        "product_reference": "ntp-4.2.8p9-48.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-48.9.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586"
        },
        "product_reference": "ntp-doc-4.2.8p9-48.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-48.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586"
        },
        "product_reference": "ntp-4.2.8p9-48.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-48.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x"
        },
        "product_reference": "ntp-4.2.8p9-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-48.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p9-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-48.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586"
        },
        "product_reference": "ntp-doc-4.2.8p9-48.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-48.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p9-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-48.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p9-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-48.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586"
        },
        "product_reference": "ntp-4.2.8p9-48.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-48.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x"
        },
        "product_reference": "ntp-4.2.8p9-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-48.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p9-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-48.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586"
        },
        "product_reference": "ntp-doc-4.2.8p9-48.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-48.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p9-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-48.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p9-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-48.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586"
        },
        "product_reference": "ntp-4.2.8p9-48.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-48.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x"
        },
        "product_reference": "ntp-4.2.8p9-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-4.2.8p9-48.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64"
        },
        "product_reference": "ntp-4.2.8p9-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-48.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586"
        },
        "product_reference": "ntp-doc-4.2.8p9-48.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-48.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x"
        },
        "product_reference": "ntp-doc-4.2.8p9-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ntp-doc-4.2.8p9-48.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64"
        },
        "product_reference": "ntp-doc-4.2.8p9-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-5219",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-5219"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-5219",
          "url": "https://www.suse.com/security/cve/CVE-2015-5219"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-5219",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943216 for CVE-2015-5219",
          "url": "https://bugzilla.suse.com/943216"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943218 for CVE-2015-5219",
          "url": "https://bugzilla.suse.com/943218"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943219 for CVE-2015-5219",
          "url": "https://bugzilla.suse.com/943219"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 943221 for CVE-2015-5219",
          "url": "https://bugzilla.suse.com/943221"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-5219",
          "url": "https://bugzilla.suse.com/959243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-01-23T11:27:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-5219"
    },
    {
      "cve": "CVE-2015-8139",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8139"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8139",
          "url": "https://www.suse.com/security/cve/CVE-2015-8139"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-8139",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-8139",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962997 for CVE-2015-8139",
          "url": "https://bugzilla.suse.com/962997"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-01-23T11:27:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8139"
    },
    {
      "cve": "CVE-2015-8140",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8140"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8140",
          "url": "https://www.suse.com/security/cve/CVE-2015-8140"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010964 for CVE-2015-8140",
          "url": "https://bugzilla.suse.com/1010964"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959243 for CVE-2015-8140",
          "url": "https://bugzilla.suse.com/959243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962994 for CVE-2015-8140",
          "url": "https://bugzilla.suse.com/962994"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-01-23T11:27:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8140"
    },
    {
      "cve": "CVE-2016-7426",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7426"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7426",
          "url": "https://www.suse.com/security/cve/CVE-2016-7426"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011406 for CVE-2016-7426",
          "url": "https://bugzilla.suse.com/1011406"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-7426",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-7426",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-01-23T11:27:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-7426"
    },
    {
      "cve": "CVE-2016-7427",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7427"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via a crafted broadcast mode packet.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7427",
          "url": "https://www.suse.com/security/cve/CVE-2016-7427"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011390 for CVE-2016-7427",
          "url": "https://bugzilla.suse.com/1011390"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-7427",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-7427",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-01-23T11:27:30Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-7427"
    },
    {
      "cve": "CVE-2016-7428",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7428"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via the poll interval in a broadcast packet.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7428",
          "url": "https://www.suse.com/security/cve/CVE-2016-7428"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011417 for CVE-2016-7428",
          "url": "https://bugzilla.suse.com/1011417"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-7428",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-7428",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-01-23T11:27:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-7428"
    },
    {
      "cve": "CVE-2016-7429",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7429"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a source) by sending a response for a source to an interface the source does not use.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7429",
          "url": "https://www.suse.com/security/cve/CVE-2016-7429"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011404 for CVE-2016-7429",
          "url": "https://bugzilla.suse.com/1011404"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-7429",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-7429",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-01-23T11:27:30Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-7429"
    },
    {
      "cve": "CVE-2016-7431",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7431"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero.  NOTE: this vulnerability exists because of a CVE-2015-8138 regression.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7431",
          "url": "https://www.suse.com/security/cve/CVE-2016-7431"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011395 for CVE-2016-7431",
          "url": "https://bugzilla.suse.com/1011395"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-7431",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-7431",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-01-23T11:27:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-7431"
    },
    {
      "cve": "CVE-2016-7433",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7433"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a \"root distance that did not include the peer dispersion.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7433",
          "url": "https://www.suse.com/security/cve/CVE-2016-7433"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011411 for CVE-2016-7433",
          "url": "https://bugzilla.suse.com/1011411"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-7433",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-7433",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-01-23T11:27:30Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-7433"
    },
    {
      "cve": "CVE-2016-7434",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7434"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7434",
          "url": "https://www.suse.com/security/cve/CVE-2016-7434"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011398 for CVE-2016-7434",
          "url": "https://bugzilla.suse.com/1011398"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-7434",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-7434",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-01-23T11:27:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-7434"
    },
    {
      "cve": "CVE-2016-9310",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9310"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9310",
          "url": "https://www.suse.com/security/cve/CVE-2016-9310"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011377 for CVE-2016-9310",
          "url": "https://bugzilla.suse.com/1011377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-9310",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-9310",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-01-23T11:27:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-9310"
    },
    {
      "cve": "CVE-2016-9311",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9311"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted packet.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
          "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
          "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9311",
          "url": "https://www.suse.com/security/cve/CVE-2016-9311"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011377 for CVE-2016-9311",
          "url": "https://bugzilla.suse.com/1011377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011421 for CVE-2016-9311",
          "url": "https://bugzilla.suse.com/1011421"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012330 for CVE-2016-9311",
          "url": "https://bugzilla.suse.com/1012330"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP2-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP3-TERADATA:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.s390x",
            "SUSE Manager 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE Manager Proxy 2.1:ntp-doc-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-4.2.8p9-48.9.1.x86_64",
            "SUSE OpenStack Cloud 5:ntp-doc-4.2.8p9-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-01-23T11:27:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-9311"
    }
  ]
}

CVE-2016-7431 (GCVE-0-2016-7431)

Vulnerability from cvelistv5

Published

2017-01-13 16:00

Modified

2024-08-06 01:57

Severity ?

CWE

Summary

NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.

References

URL

Tags

	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us	x_refsource_CONFIRM
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_us	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/94454	vdb-entry, x_refsource_BID
	http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities	x_refsource_CONFIRM
	http://nwtime.org/ntp428p9_release/	x_refsource_CONFIRM
	https://www.kb.cert.org/vuls/id/633847	third-party-advisory, x_refsource_CERT-VN
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03899en_us	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037354	vdb-entry, x_refsource_SECTRACK
	https://bto.bluecoat.com/security-advisory/sa139	x_refsource_CONFIRM
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	http://support.ntp.org/bin/view/Main/NtpBug3102	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/540254/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html	vendor-advisory, x_refsource_SUSE
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03899en_us	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3349-1	vendor-advisory, x_refsource_UBUNTU
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03883en_us	x_refsource_CONFIRM
	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en	x_refsource_CONFIRM
	https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-223/	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/539955/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://packetstormsecurity.com/files/140240/FreeBSD-Security-Advisory-FreeBSD-SA-16.39.ntp.html	x_refsource_MISC
	http://www.securityfocus.com/archive/1/archive/1/539955/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:57:47.665Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03883en_us"
          },
          {
            "name": "94454",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94454"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nwtime.org/ntp428p9_release/"
          },
          {
            "name": "VU#633847",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/633847"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03899en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
          },
          {
            "name": "1037354",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037354"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa139"
          },
          {
            "name": "FreeBSD-SA-16:39",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/NtpBug3102"
          },
          {
            "name": "20170310 [security bulletin] HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/540254/100/0/threaded"
          },
          {
            "name": "20170310 [security bulletin] HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded"
          },
          {
            "name": "openSUSE-SU-2016:3280",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en\u0026docId=emr_na-hpesbhf03899en_us"
          },
          {
            "name": "USN-3349-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3349-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en\u0026docId=emr_na-hpesbhf03883en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-223/"
          },
          {
            "name": "20161222 FreeBSD Security Advisory FreeBSD-SA-16:39.ntp",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/539955/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/140240/FreeBSD-Security-Advisory-FreeBSD-SA-16.39.ntp.html"
          },
          {
            "name": "20161222 FreeBSD Security Advisory FreeBSD-SA-16:39.ntp",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/archive/1/539955/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero.  NOTE: this vulnerability exists because of a CVE-2015-8138 regression."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-12T16:41:31",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03883en_us"
        },
        {
          "name": "94454",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94454"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nwtime.org/ntp428p9_release/"
        },
        {
          "name": "VU#633847",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/633847"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03899en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
        },
        {
          "name": "1037354",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037354"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa139"
        },
        {
          "name": "FreeBSD-SA-16:39",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/NtpBug3102"
        },
        {
          "name": "20170310 [security bulletin] HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/540254/100/0/threaded"
        },
        {
          "name": "20170310 [security bulletin] HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded"
        },
        {
          "name": "openSUSE-SU-2016:3280",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en\u0026docId=emr_na-hpesbhf03899en_us"
        },
        {
          "name": "USN-3349-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3349-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en\u0026docId=emr_na-hpesbhf03883en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-223/"
        },
        {
          "name": "20161222 FreeBSD Security Advisory FreeBSD-SA-16:39.ntp",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/539955/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/140240/FreeBSD-Security-Advisory-FreeBSD-SA-16.39.ntp.html"
        },
        {
          "name": "20161222 FreeBSD Security Advisory FreeBSD-SA-16:39.ntp",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/archive/1/539955/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7431",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero.  NOTE: this vulnerability exists because of a CVE-2015-8138 regression."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03883en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03883en_us"
            },
            {
              "name": "94454",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94454"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
            },
            {
              "name": "http://nwtime.org/ntp428p9_release/",
              "refsource": "CONFIRM",
              "url": "http://nwtime.org/ntp428p9_release/"
            },
            {
              "name": "VU#633847",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/633847"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03899en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03899en_us"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
            },
            {
              "name": "1037354",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037354"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa139",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa139"
            },
            {
              "name": "FreeBSD-SA-16:39",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/NtpBug3102",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/NtpBug3102"
            },
            {
              "name": "20170310 [security bulletin] HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/540254/100/0/threaded"
            },
            {
              "name": "20170310 [security bulletin] HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded"
            },
            {
              "name": "openSUSE-SU-2016:3280",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en\u0026docId=emr_na-hpesbhf03899en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en\u0026docId=emr_na-hpesbhf03899en_us"
            },
            {
              "name": "USN-3349-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3349-1"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en\u0026docId=emr_na-hpesbhf03883en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en\u0026docId=emr_na-hpesbhf03883en_us"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en"
            },
            {
              "name": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-223/",
              "refsource": "CONFIRM",
              "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-223/"
            },
            {
              "name": "20161222 FreeBSD Security Advisory FreeBSD-SA-16:39.ntp",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/539955/100/0/threaded"
            },
            {
              "name": "http://packetstormsecurity.com/files/140240/FreeBSD-Security-Advisory-FreeBSD-SA-16.39.ntp.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/140240/FreeBSD-Security-Advisory-FreeBSD-SA-16.39.ntp.html"
            },
            {
              "name": "20161222 FreeBSD Security Advisory FreeBSD-SA-16:39.ntp",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/archive/1/539955/100/0/threaded"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf"
            },
            {
              "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11",
              "refsource": "MISC",
              "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7431",
    "datePublished": "2017-01-13T16:00:00",
    "dateReserved": "2016-09-09T00:00:00",
    "dateUpdated": "2024-08-06T01:57:47.665Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-7433 (GCVE-0-2016-7433)

Vulnerability from cvelistv5

Published

2017-01-13 16:00

Modified

2024-08-06 01:57

Severity ?

CWE

Summary

NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."

References

URL

Tags

	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0252.html	vendor-advisory, x_refsource_REDHAT
	http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities	x_refsource_CONFIRM
	http://nwtime.org/ntp428p9_release/	x_refsource_CONFIRM
	https://www.kb.cert.org/vuls/id/633847	third-party-advisory, x_refsource_CERT-VN
	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037354	vdb-entry, x_refsource_SECTRACK
	https://bto.bluecoat.com/security-advisory/sa139	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/94455	vdb-entry, x_refsource_BID
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	http://support.ntp.org/bin/view/Main/NtpBug3067	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/540254/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-3349-1	vendor-advisory, x_refsource_UBUNTU
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PABKEYX6ABBFJZGMXKH57X756EJUDS3C/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5E3XBBCK5IXOLDAH2E4M3QKIYIHUMMP/	vendor-advisory, x_refsource_FEDORA
	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en	x_refsource_CONFIRM
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ILMSYVQMMF37MANYEO7KBHOPSC74EKGN/	vendor-advisory, x_refsource_FEDORA
	https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-227/	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/539955/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-227	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/archive/1/539955/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:57:47.633Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
          },
          {
            "name": "RHSA-2017:0252",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nwtime.org/ntp428p9_release/"
          },
          {
            "name": "VU#633847",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/633847"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
          },
          {
            "name": "1037354",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037354"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa139"
          },
          {
            "name": "94455",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94455"
          },
          {
            "name": "FreeBSD-SA-16:39",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/NtpBug3067"
          },
          {
            "name": "20170310 [security bulletin] HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/540254/100/0/threaded"
          },
          {
            "name": "20170310 [security bulletin] HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded"
          },
          {
            "name": "openSUSE-SU-2016:3280",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html"
          },
          {
            "name": "USN-3349-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3349-1"
          },
          {
            "name": "FEDORA-2016-e8a8561ee7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PABKEYX6ABBFJZGMXKH57X756EJUDS3C/"
          },
          {
            "name": "FEDORA-2016-7209ab4e02",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5E3XBBCK5IXOLDAH2E4M3QKIYIHUMMP/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en"
          },
          {
            "name": "FEDORA-2016-c198d15316",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ILMSYVQMMF37MANYEO7KBHOPSC74EKGN/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-227/"
          },
          {
            "name": "20161222 FreeBSD Security Advisory FreeBSD-SA-16:39.ntp",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/539955/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-227"
          },
          {
            "name": "20161222 FreeBSD Security Advisory FreeBSD-SA-16:39.ntp",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/archive/1/539955/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a \"root distance that did not include the peer dispersion.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-16T12:08:43",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
        },
        {
          "name": "RHSA-2017:0252",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nwtime.org/ntp428p9_release/"
        },
        {
          "name": "VU#633847",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/633847"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
        },
        {
          "name": "1037354",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037354"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa139"
        },
        {
          "name": "94455",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94455"
        },
        {
          "name": "FreeBSD-SA-16:39",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/NtpBug3067"
        },
        {
          "name": "20170310 [security bulletin] HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/540254/100/0/threaded"
        },
        {
          "name": "20170310 [security bulletin] HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded"
        },
        {
          "name": "openSUSE-SU-2016:3280",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html"
        },
        {
          "name": "USN-3349-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3349-1"
        },
        {
          "name": "FEDORA-2016-e8a8561ee7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PABKEYX6ABBFJZGMXKH57X756EJUDS3C/"
        },
        {
          "name": "FEDORA-2016-7209ab4e02",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5E3XBBCK5IXOLDAH2E4M3QKIYIHUMMP/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en"
        },
        {
          "name": "FEDORA-2016-c198d15316",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ILMSYVQMMF37MANYEO7KBHOPSC74EKGN/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-227/"
        },
        {
          "name": "20161222 FreeBSD Security Advisory FreeBSD-SA-16:39.ntp",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/539955/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-227"
        },
        {
          "name": "20161222 FreeBSD Security Advisory FreeBSD-SA-16:39.ntp",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/archive/1/539955/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7433",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a \"root distance that did not include the peer dispersion.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
            },
            {
              "name": "RHSA-2017:0252",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
            },
            {
              "name": "http://nwtime.org/ntp428p9_release/",
              "refsource": "CONFIRM",
              "url": "http://nwtime.org/ntp428p9_release/"
            },
            {
              "name": "VU#633847",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/633847"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
            },
            {
              "name": "1037354",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037354"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa139",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa139"
            },
            {
              "name": "94455",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94455"
            },
            {
              "name": "FreeBSD-SA-16:39",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/NtpBug3067",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/NtpBug3067"
            },
            {
              "name": "20170310 [security bulletin] HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/540254/100/0/threaded"
            },
            {
              "name": "20170310 [security bulletin] HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded"
            },
            {
              "name": "openSUSE-SU-2016:3280",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html"
            },
            {
              "name": "USN-3349-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-3349-1"
            },
            {
              "name": "FEDORA-2016-e8a8561ee7",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PABKEYX6ABBFJZGMXKH57X756EJUDS3C/"
            },
            {
              "name": "FEDORA-2016-7209ab4e02",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5E3XBBCK5IXOLDAH2E4M3QKIYIHUMMP/"
            },
            {
              "name": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en",
              "refsource": "CONFIRM",
              "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en"
            },
            {
              "name": "FEDORA-2016-c198d15316",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ILMSYVQMMF37MANYEO7KBHOPSC74EKGN/"
            },
            {
              "name": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-227/",
              "refsource": "CONFIRM",
              "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-227/"
            },
            {
              "name": "20161222 FreeBSD Security Advisory FreeBSD-SA-16:39.ntp",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/539955/100/0/threaded"
            },
            {
              "name": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-227",
              "refsource": "CONFIRM",
              "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-227"
            },
            {
              "name": "20161222 FreeBSD Security Advisory FreeBSD-SA-16:39.ntp",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/archive/1/539955/100/0/threaded"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf"
            },
            {
              "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11",
              "refsource": "MISC",
              "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7433",
    "datePublished": "2017-01-13T16:00:00",
    "dateReserved": "2016-09-09T00:00:00",
    "dateUpdated": "2024-08-06T01:57:47.633Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-7426 (GCVE-0-2016-7426)

Vulnerability from cvelistv5

Published

2017-01-13 16:00

Modified

2024-08-06 01:57

Severity ?

CWE

Summary

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.

References

URL

Tags

	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us	x_refsource_CONFIRM
	https://usn.ubuntu.com/3707-2/	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2017-0252.html	vendor-advisory, x_refsource_REDHAT
	http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities	x_refsource_CONFIRM
	http://nwtime.org/ntp428p9_release/	x_refsource_CONFIRM
	https://www.kb.cert.org/vuls/id/633847	third-party-advisory, x_refsource_CERT-VN
	http://www.securitytracker.com/id/1037354	vdb-entry, x_refsource_SECTRACK
	https://bto.bluecoat.com/security-advisory/sa139	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/NtpBug3071	x_refsource_CONFIRM
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	http://www.securityfocus.com/bid/94451	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:57:47.647Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
          },
          {
            "name": "USN-3707-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3707-2/"
          },
          {
            "name": "RHSA-2017:0252",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nwtime.org/ntp428p9_release/"
          },
          {
            "name": "VU#633847",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/633847"
          },
          {
            "name": "1037354",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037354"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa139"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/NtpBug3071"
          },
          {
            "name": "FreeBSD-SA-16:39",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
          },
          {
            "name": "94451",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94451"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-01-24T10:57:02",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
        },
        {
          "name": "USN-3707-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3707-2/"
        },
        {
          "name": "RHSA-2017:0252",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nwtime.org/ntp428p9_release/"
        },
        {
          "name": "VU#633847",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/633847"
        },
        {
          "name": "1037354",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037354"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa139"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/NtpBug3071"
        },
        {
          "name": "FreeBSD-SA-16:39",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
        },
        {
          "name": "94451",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94451"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7426",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
            },
            {
              "name": "USN-3707-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3707-2/"
            },
            {
              "name": "RHSA-2017:0252",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
            },
            {
              "name": "http://nwtime.org/ntp428p9_release/",
              "refsource": "CONFIRM",
              "url": "http://nwtime.org/ntp428p9_release/"
            },
            {
              "name": "VU#633847",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/633847"
            },
            {
              "name": "1037354",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037354"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa139",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa139"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/NtpBug3071",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/NtpBug3071"
            },
            {
              "name": "FreeBSD-SA-16:39",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
            },
            {
              "name": "94451",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94451"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7426",
    "datePublished": "2017-01-13T16:00:00",
    "dateReserved": "2016-09-09T00:00:00",
    "dateUpdated": "2024-08-06T01:57:47.647Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-9310 (GCVE-0-2016-9310)

Vulnerability from cvelistv5

Published

2017-01-13 16:00

Modified

2024-08-06 02:50

Severity ?

CWE

Summary

The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.

References

URL

Tags

	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/NtpBug3118	x_refsource_CONFIRM
	https://usn.ubuntu.com/3707-2/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/94452	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2017-0252.html	vendor-advisory, x_refsource_REDHAT
	http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities	x_refsource_CONFIRM
	http://nwtime.org/ntp428p9_release/	x_refsource_CONFIRM
	https://www.kb.cert.org/vuls/id/633847	third-party-advisory, x_refsource_CERT-VN
	http://www.securitytracker.com/id/1037354	vdb-entry, x_refsource_SECTRACK
	https://bto.bluecoat.com/security-advisory/sa139	x_refsource_CONFIRM
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03799en_us	x_refsource_CONFIRM
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc	vendor-advisory, x_refsource_FREEBSD

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:50:37.626Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/NtpBug3118"
          },
          {
            "name": "USN-3707-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3707-2/"
          },
          {
            "name": "94452",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94452"
          },
          {
            "name": "RHSA-2017:0252",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nwtime.org/ntp428p9_release/"
          },
          {
            "name": "VU#633847",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/633847"
          },
          {
            "name": "1037354",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037354"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa139"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03799en_us"
          },
          {
            "name": "FreeBSD-SA-16:39",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-01-24T10:57:02",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/NtpBug3118"
        },
        {
          "name": "USN-3707-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3707-2/"
        },
        {
          "name": "94452",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94452"
        },
        {
          "name": "RHSA-2017:0252",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nwtime.org/ntp428p9_release/"
        },
        {
          "name": "VU#633847",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/633847"
        },
        {
          "name": "1037354",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037354"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa139"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03799en_us"
        },
        {
          "name": "FreeBSD-SA-16:39",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-9310",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/NtpBug3118",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/NtpBug3118"
            },
            {
              "name": "USN-3707-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3707-2/"
            },
            {
              "name": "94452",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94452"
            },
            {
              "name": "RHSA-2017:0252",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
            },
            {
              "name": "http://nwtime.org/ntp428p9_release/",
              "refsource": "CONFIRM",
              "url": "http://nwtime.org/ntp428p9_release/"
            },
            {
              "name": "VU#633847",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/633847"
            },
            {
              "name": "1037354",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037354"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa139",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa139"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03799en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03799en_us"
            },
            {
              "name": "FreeBSD-SA-16:39",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-9310",
    "datePublished": "2017-01-13T16:00:00",
    "dateReserved": "2016-11-14T00:00:00",
    "dateUpdated": "2024-08-06T02:50:37.626Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-7427 (GCVE-0-2016-7427)

Vulnerability from cvelistv5

Published

2017-01-13 16:00

Modified

2024-08-06 01:57

Severity ?

CWE

Summary

The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via a crafted broadcast mode packet.

References

URL

Tags

	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us	x_refsource_CONFIRM
	https://usn.ubuntu.com/3707-2/	vendor-advisory, x_refsource_UBUNTU
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_us	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities	x_refsource_CONFIRM
	http://nwtime.org/ntp428p9_release/	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/NtpBug3114	x_refsource_CONFIRM
	https://www.kb.cert.org/vuls/id/633847	third-party-advisory, x_refsource_CERT-VN
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03899en_us	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037354	vdb-entry, x_refsource_SECTRACK
	https://bto.bluecoat.com/security-advisory/sa139	x_refsource_CONFIRM
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	http://www.securityfocus.com/bid/94447	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:57:47.547Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
          },
          {
            "name": "USN-3707-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3707-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03883en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nwtime.org/ntp428p9_release/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/NtpBug3114"
          },
          {
            "name": "VU#633847",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/633847"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03899en_us"
          },
          {
            "name": "1037354",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037354"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa139"
          },
          {
            "name": "FreeBSD-SA-16:39",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
          },
          {
            "name": "94447",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94447"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via a crafted broadcast mode packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-01-24T10:57:02",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
        },
        {
          "name": "USN-3707-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3707-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03883en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nwtime.org/ntp428p9_release/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/NtpBug3114"
        },
        {
          "name": "VU#633847",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/633847"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03899en_us"
        },
        {
          "name": "1037354",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037354"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa139"
        },
        {
          "name": "FreeBSD-SA-16:39",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
        },
        {
          "name": "94447",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94447"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7427",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via a crafted broadcast mode packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
            },
            {
              "name": "USN-3707-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3707-2/"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03883en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03883en_us"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
            },
            {
              "name": "http://nwtime.org/ntp428p9_release/",
              "refsource": "CONFIRM",
              "url": "http://nwtime.org/ntp428p9_release/"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/NtpBug3114",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/NtpBug3114"
            },
            {
              "name": "VU#633847",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/633847"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03899en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03899en_us"
            },
            {
              "name": "1037354",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037354"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa139",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa139"
            },
            {
              "name": "FreeBSD-SA-16:39",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
            },
            {
              "name": "94447",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94447"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7427",
    "datePublished": "2017-01-13T16:00:00",
    "dateReserved": "2016-09-09T00:00:00",
    "dateUpdated": "2024-08-06T01:57:47.547Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-7434 (GCVE-0-2016-7434)

Vulnerability from cvelistv5

Published

2017-01-13 16:00

Modified

2024-08-06 01:57

Severity ?

CWE

Summary

The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.

References

URL

Tags

	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/94448	vdb-entry, x_refsource_BID
	http://support.ntp.org/bin/view/Main/NtpBug3082	x_refsource_CONFIRM
	https://www.exploit-db.com/exploits/40806/	exploit, x_refsource_EXPLOIT-DB
	http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities	x_refsource_CONFIRM
	http://nwtime.org/ntp428p9_release/	x_refsource_CONFIRM
	https://www.kb.cert.org/vuls/id/633847	third-party-advisory, x_refsource_CERT-VN
	http://www.securitytracker.com/id/1037354	vdb-entry, x_refsource_SECTRACK
	https://bto.bluecoat.com/security-advisory/sa139	x_refsource_CONFIRM
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc	vendor-advisory, x_refsource_FREEBSD

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:57:47.653Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
          },
          {
            "name": "94448",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94448"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/NtpBug3082"
          },
          {
            "name": "40806",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/40806/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nwtime.org/ntp428p9_release/"
          },
          {
            "name": "VU#633847",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/633847"
          },
          {
            "name": "1037354",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037354"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa139"
          },
          {
            "name": "FreeBSD-SA-16:39",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-20T15:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
        },
        {
          "name": "94448",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94448"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/NtpBug3082"
        },
        {
          "name": "40806",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/40806/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nwtime.org/ntp428p9_release/"
        },
        {
          "name": "VU#633847",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/633847"
        },
        {
          "name": "1037354",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037354"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa139"
        },
        {
          "name": "FreeBSD-SA-16:39",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7434",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
            },
            {
              "name": "94448",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94448"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/NtpBug3082",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/NtpBug3082"
            },
            {
              "name": "40806",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/40806/"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
            },
            {
              "name": "http://nwtime.org/ntp428p9_release/",
              "refsource": "CONFIRM",
              "url": "http://nwtime.org/ntp428p9_release/"
            },
            {
              "name": "VU#633847",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/633847"
            },
            {
              "name": "1037354",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037354"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa139",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa139"
            },
            {
              "name": "FreeBSD-SA-16:39",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7434",
    "datePublished": "2017-01-13T16:00:00",
    "dateReserved": "2016-09-09T00:00:00",
    "dateUpdated": "2024-08-06T01:57:47.653Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-8140 (GCVE-0-2015-8140)

Vulnerability from cvelistv5

Published

2017-01-30 21:00

Modified

2024-08-06 08:13

Severity ?

CWE

Summary

The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network.

References

URL

Tags

	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd	vendor-advisory, x_refsource_CISCO
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html	vendor-advisory, x_refsource_SUSE
	http://www.securitytracker.com/id/1034782	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.kb.cert.org/vuls/id/718152	third-party-advisory, x_refsource_CERT-VN
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html	vendor-advisory, x_refsource_SUSE
	http://support.ntp.org/bin/view/Main/NtpBug2947	x_refsource_CONFIRM
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://bto.bluecoat.com/security-advisory/sa113	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20200204-0003/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:13:31.109Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd"
          },
          {
            "name": "SUSE-SU-2016:1177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html"
          },
          {
            "name": "1034782",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1034782"
          },
          {
            "name": "openSUSE-SU-2016:1292",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html"
          },
          {
            "name": "VU#718152",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/718152"
          },
          {
            "name": "SUSE-SU-2016:1247",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html"
          },
          {
            "name": "SUSE-SU-2016:1311",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html"
          },
          {
            "name": "SUSE-SU-2016:1175",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/NtpBug2947"
          },
          {
            "name": "FreeBSD-SA-16:09",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa113"
          },
          {
            "name": "openSUSE-SU-2016:1423",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html"
          },
          {
            "name": "GLSA-201607-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201607-15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200204-0003/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-01-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-04T11:05:59",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd"
        },
        {
          "name": "SUSE-SU-2016:1177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html"
        },
        {
          "name": "1034782",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1034782"
        },
        {
          "name": "openSUSE-SU-2016:1292",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html"
        },
        {
          "name": "VU#718152",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/718152"
        },
        {
          "name": "SUSE-SU-2016:1247",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html"
        },
        {
          "name": "SUSE-SU-2016:1311",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html"
        },
        {
          "name": "SUSE-SU-2016:1175",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/NtpBug2947"
        },
        {
          "name": "FreeBSD-SA-16:09",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa113"
        },
        {
          "name": "openSUSE-SU-2016:1423",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html"
        },
        {
          "name": "GLSA-201607-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201607-15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200204-0003/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-8140",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
              "refsource": "CISCO",
              "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd"
            },
            {
              "name": "SUSE-SU-2016:1177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html"
            },
            {
              "name": "1034782",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1034782"
            },
            {
              "name": "openSUSE-SU-2016:1292",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html"
            },
            {
              "name": "VU#718152",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/718152"
            },
            {
              "name": "SUSE-SU-2016:1247",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html"
            },
            {
              "name": "SUSE-SU-2016:1311",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html"
            },
            {
              "name": "SUSE-SU-2016:1175",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/NtpBug2947",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/NtpBug2947"
            },
            {
              "name": "FreeBSD-SA-16:09",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa113",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa113"
            },
            {
              "name": "openSUSE-SU-2016:1423",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html"
            },
            {
              "name": "GLSA-201607-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201607-15"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200204-0003/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200204-0003/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-8140",
    "datePublished": "2017-01-30T21:00:00",
    "dateReserved": "2015-11-13T00:00:00",
    "dateUpdated": "2024-08-06T08:13:31.109Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-7428 (GCVE-0-2016-7428)

Vulnerability from cvelistv5

Published

2017-01-13 16:00

Modified

2024-08-06 01:57

Severity ?

CWE

Summary

ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via the poll interval in a broadcast packet.

References

URL

Tags

	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us	x_refsource_CONFIRM
	https://usn.ubuntu.com/3707-2/	vendor-advisory, x_refsource_UBUNTU
	http://support.ntp.org/bin/view/Main/NtpBug3113	x_refsource_CONFIRM
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_us	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities	x_refsource_CONFIRM
	http://nwtime.org/ntp428p9_release/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/94446	vdb-entry, x_refsource_BID
	https://www.kb.cert.org/vuls/id/633847	third-party-advisory, x_refsource_CERT-VN
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03899en_us	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037354	vdb-entry, x_refsource_SECTRACK
	https://bto.bluecoat.com/security-advisory/sa139	x_refsource_CONFIRM
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc	vendor-advisory, x_refsource_FREEBSD

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:57:47.554Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
          },
          {
            "name": "USN-3707-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3707-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/NtpBug3113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03883en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nwtime.org/ntp428p9_release/"
          },
          {
            "name": "94446",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94446"
          },
          {
            "name": "VU#633847",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/633847"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03899en_us"
          },
          {
            "name": "1037354",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037354"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa139"
          },
          {
            "name": "FreeBSD-SA-16:39",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via the poll interval in a broadcast packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-01-24T10:57:02",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
        },
        {
          "name": "USN-3707-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3707-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/NtpBug3113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03883en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nwtime.org/ntp428p9_release/"
        },
        {
          "name": "94446",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94446"
        },
        {
          "name": "VU#633847",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/633847"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03899en_us"
        },
        {
          "name": "1037354",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037354"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa139"
        },
        {
          "name": "FreeBSD-SA-16:39",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7428",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via the poll interval in a broadcast packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
            },
            {
              "name": "USN-3707-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3707-2/"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/NtpBug3113",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/NtpBug3113"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03883en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03883en_us"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
            },
            {
              "name": "http://nwtime.org/ntp428p9_release/",
              "refsource": "CONFIRM",
              "url": "http://nwtime.org/ntp428p9_release/"
            },
            {
              "name": "94446",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94446"
            },
            {
              "name": "VU#633847",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/633847"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03899en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03899en_us"
            },
            {
              "name": "1037354",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037354"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa139",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa139"
            },
            {
              "name": "FreeBSD-SA-16:39",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7428",
    "datePublished": "2017-01-13T16:00:00",
    "dateReserved": "2016-09-09T00:00:00",
    "dateUpdated": "2024-08-06T01:57:47.554Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-9311 (GCVE-0-2016-9311)

Vulnerability from cvelistv5

Published

2017-01-13 16:00

Modified

2024-08-06 02:50

Severity ?

CWE

Summary

ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted packet.

References

URL

Tags

	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/94444	vdb-entry, x_refsource_BID
	https://usn.ubuntu.com/3707-2/	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2017-0252.html	vendor-advisory, x_refsource_REDHAT
	http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities	x_refsource_CONFIRM
	http://nwtime.org/ntp428p9_release/	x_refsource_CONFIRM
	https://www.kb.cert.org/vuls/id/633847	third-party-advisory, x_refsource_CERT-VN
	http://www.securitytracker.com/id/1037354	vdb-entry, x_refsource_SECTRACK
	https://bto.bluecoat.com/security-advisory/sa139	x_refsource_CONFIRM
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03799en_us	x_refsource_CONFIRM
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03885en_us	x_refsource_CONFIRM
	http://support.ntp.org/bin/view/Main/NtpBug3119	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:50:36.788Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
          },
          {
            "name": "94444",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94444"
          },
          {
            "name": "USN-3707-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3707-2/"
          },
          {
            "name": "RHSA-2017:0252",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nwtime.org/ntp428p9_release/"
          },
          {
            "name": "VU#633847",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/633847"
          },
          {
            "name": "1037354",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037354"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa139"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03799en_us"
          },
          {
            "name": "FreeBSD-SA-16:39",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03885en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/NtpBug3119"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-01-24T10:57:02",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
        },
        {
          "name": "94444",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94444"
        },
        {
          "name": "USN-3707-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3707-2/"
        },
        {
          "name": "RHSA-2017:0252",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nwtime.org/ntp428p9_release/"
        },
        {
          "name": "VU#633847",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/633847"
        },
        {
          "name": "1037354",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037354"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa139"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03799en_us"
        },
        {
          "name": "FreeBSD-SA-16:39",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03885en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/NtpBug3119"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-9311",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
            },
            {
              "name": "94444",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94444"
            },
            {
              "name": "USN-3707-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3707-2/"
            },
            {
              "name": "RHSA-2017:0252",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
            },
            {
              "name": "http://nwtime.org/ntp428p9_release/",
              "refsource": "CONFIRM",
              "url": "http://nwtime.org/ntp428p9_release/"
            },
            {
              "name": "VU#633847",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/633847"
            },
            {
              "name": "1037354",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037354"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa139",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa139"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03799en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03799en_us"
            },
            {
              "name": "FreeBSD-SA-16:39",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03885en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03885en_us"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/NtpBug3119",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/NtpBug3119"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-9311",
    "datePublished": "2017-01-13T16:00:00",
    "dateReserved": "2016-11-14T00:00:00",
    "dateUpdated": "2024-08-06T02:50:36.788Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-5219 (GCVE-0-2015-5219)

Vulnerability from cvelistv5

Published

2017-07-21 14:00

Modified

2024-08-06 06:41

Severity ?

CWE

Summary

The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.

References

URL

Tags

	http://aix.software.ibm.com/aix/efixes/security/ntp_advisory4.asc	x_refsource_CONFIRM
	https://www-01.ibm.com/support/docview.wss?uid=isg3T1024157	x_refsource_CONFIRM
	https://github.com/ntp-project/ntp/commit/5f295cd05c3c136d39f5b3e500a2d781bdbb59c8	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html	vendor-advisory, x_refsource_SUSE
	https://www.ibm.com/support/home/docdisplay?lndocid=migr-5099409	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2783-1	vendor-advisory, x_refsource_UBUNTU
	https://www-01.ibm.com/support/docview.wss?uid=swg21986956	x_refsource_CONFIRM
	https://www-01.ibm.com/support/docview.wss?uid=swg21988706	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2583.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html	vendor-advisory, x_refsource_FEDORA
	http://bk1.ntp.org/ntp-dev/?PAGE=patch&REV=51786731Gr4-NOrTBC_a_uXO4wuGhg	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-0780.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2015/dsa-3388	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2015/08/25/3	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1255118	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/76473	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.html	vendor-advisory, x_refsource_FEDORA
	https://www-01.ibm.com/support/docview.wss?uid=swg21989542	x_refsource_CONFIRM
	https://www-01.ibm.com/support/docview.wss?uid=swg21985122	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166992.html	vendor-advisory, x_refsource_FEDORA
	https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf	x_refsource_CONFIRM
	https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:41:08.551Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://aix.software.ibm.com/aix/efixes/security/ntp_advisory4.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-01.ibm.com/support/docview.wss?uid=isg3T1024157"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/ntp-project/ntp/commit/5f295cd05c3c136d39f5b3e500a2d781bdbb59c8"
          },
          {
            "name": "openSUSE-SU:2016:3280",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.ibm.com/support/home/docdisplay?lndocid=migr-5099409"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "USN-2783-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2783-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-01.ibm.com/support/docview.wss?uid=swg21986956"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-01.ibm.com/support/docview.wss?uid=swg21988706"
          },
          {
            "name": "RHSA-2016:2583",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2583.html"
          },
          {
            "name": "FEDORA-2015-77bfbc1bcd",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bk1.ntp.org/ntp-dev/?PAGE=patch\u0026REV=51786731Gr4-NOrTBC_a_uXO4wuGhg"
          },
          {
            "name": "RHSA-2016:0780",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0780.html"
          },
          {
            "name": "DSA-3388",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3388"
          },
          {
            "name": "[oss-security] 20150825 Several low impact ntp.org ntpd issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/08/25/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1255118"
          },
          {
            "name": "76473",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/76473"
          },
          {
            "name": "SUSE-SU:2016:1311",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html"
          },
          {
            "name": "FEDORA-2015-14212",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-01.ibm.com/support/docview.wss?uid=swg21989542"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www-01.ibm.com/support/docview.wss?uid=swg21985122"
          },
          {
            "name": "FEDORA-2015-14213",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166992.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-04-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-04-15T20:35:47",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://aix.software.ibm.com/aix/efixes/security/ntp_advisory4.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-01.ibm.com/support/docview.wss?uid=isg3T1024157"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/ntp-project/ntp/commit/5f295cd05c3c136d39f5b3e500a2d781bdbb59c8"
        },
        {
          "name": "openSUSE-SU:2016:3280",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.ibm.com/support/home/docdisplay?lndocid=migr-5099409"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "USN-2783-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2783-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-01.ibm.com/support/docview.wss?uid=swg21986956"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-01.ibm.com/support/docview.wss?uid=swg21988706"
        },
        {
          "name": "RHSA-2016:2583",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2583.html"
        },
        {
          "name": "FEDORA-2015-77bfbc1bcd",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bk1.ntp.org/ntp-dev/?PAGE=patch\u0026REV=51786731Gr4-NOrTBC_a_uXO4wuGhg"
        },
        {
          "name": "RHSA-2016:0780",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0780.html"
        },
        {
          "name": "DSA-3388",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3388"
        },
        {
          "name": "[oss-security] 20150825 Several low impact ntp.org ntpd issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/08/25/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1255118"
        },
        {
          "name": "76473",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/76473"
        },
        {
          "name": "SUSE-SU:2016:1311",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html"
        },
        {
          "name": "FEDORA-2015-14212",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-01.ibm.com/support/docview.wss?uid=swg21989542"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www-01.ibm.com/support/docview.wss?uid=swg21985122"
        },
        {
          "name": "FEDORA-2015-14213",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166992.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-5219",
    "datePublished": "2017-07-21T14:00:00",
    "dateReserved": "2015-07-01T00:00:00",
    "dateUpdated": "2024-08-06T06:41:08.551Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-8139 (GCVE-0-2015-8139)

Vulnerability from cvelistv5

Published

2017-01-30 21:00

Modified

2024-08-06 08:13

Severity ?

CWE

Summary

ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors.

References

URL

Tags

	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd	vendor-advisory, x_refsource_CISCO
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/	vendor-advisory, x_refsource_FEDORA
	http://www.securitytracker.com/id/1034782	vdb-entry, x_refsource_SECTRACK
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.kb.cert.org/vuls/id/718152	third-party-advisory, x_refsource_CERT-VN
	http://support.ntp.org/bin/view/Main/NtpBug2946	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/82105	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html	vendor-advisory, x_refsource_SUSE
	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory, x_refsource_FREEBSD
	https://bto.bluecoat.com/security-advisory/sa113	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201607-15	vendor-advisory, x_refsource_GENTOO
	https://security.netapp.com/advisory/ntap-20200204-0003/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:13:31.058Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd"
          },
          {
            "name": "FEDORA-2016-c3bd6a3496",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/"
          },
          {
            "name": "SUSE-SU-2016:1177",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html"
          },
          {
            "name": "FEDORA-2016-89e0874533",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/"
          },
          {
            "name": "1034782",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1034782"
          },
          {
            "name": "openSUSE-SU-2016:1292",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html"
          },
          {
            "name": "VU#718152",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/718152"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/NtpBug2946"
          },
          {
            "name": "SUSE-SU-2016:1247",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html"
          },
          {
            "name": "82105",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/82105"
          },
          {
            "name": "SUSE-SU-2016:1311",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html"
          },
          {
            "name": "FEDORA-2016-50b0066b7f",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/"
          },
          {
            "name": "SUSE-SU-2016:1175",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html"
          },
          {
            "name": "FreeBSD-SA-16:09",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa113"
          },
          {
            "name": "openSUSE-SU-2016:1423",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html"
          },
          {
            "name": "GLSA-201607-15",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201607-15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200204-0003/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-01-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-04T11:06:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd"
        },
        {
          "name": "FEDORA-2016-c3bd6a3496",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/"
        },
        {
          "name": "SUSE-SU-2016:1177",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html"
        },
        {
          "name": "FEDORA-2016-89e0874533",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/"
        },
        {
          "name": "1034782",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1034782"
        },
        {
          "name": "openSUSE-SU-2016:1292",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html"
        },
        {
          "name": "VU#718152",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/718152"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/NtpBug2946"
        },
        {
          "name": "SUSE-SU-2016:1247",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html"
        },
        {
          "name": "82105",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/82105"
        },
        {
          "name": "SUSE-SU-2016:1311",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html"
        },
        {
          "name": "FEDORA-2016-50b0066b7f",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/"
        },
        {
          "name": "SUSE-SU-2016:1175",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html"
        },
        {
          "name": "FreeBSD-SA-16:09",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa113"
        },
        {
          "name": "openSUSE-SU-2016:1423",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html"
        },
        {
          "name": "GLSA-201607-15",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201607-15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200204-0003/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-8139",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20160120 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products - January 2016",
              "refsource": "CISCO",
              "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd"
            },
            {
              "name": "FEDORA-2016-c3bd6a3496",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/"
            },
            {
              "name": "SUSE-SU-2016:1177",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html"
            },
            {
              "name": "FEDORA-2016-89e0874533",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/"
            },
            {
              "name": "1034782",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1034782"
            },
            {
              "name": "openSUSE-SU-2016:1292",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html"
            },
            {
              "name": "VU#718152",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/718152"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/NtpBug2946",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/NtpBug2946"
            },
            {
              "name": "SUSE-SU-2016:1247",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html"
            },
            {
              "name": "82105",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/82105"
            },
            {
              "name": "SUSE-SU-2016:1311",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html"
            },
            {
              "name": "FEDORA-2016-50b0066b7f",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K3EYJQHJZ2KTVQ7ICEFHXTLZ36MRASWX/"
            },
            {
              "name": "SUSE-SU-2016:1175",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.html"
            },
            {
              "name": "FreeBSD-SA-16:09",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa113",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa113"
            },
            {
              "name": "openSUSE-SU-2016:1423",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html"
            },
            {
              "name": "GLSA-201607-15",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201607-15"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200204-0003/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200204-0003/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-8139",
    "datePublished": "2017-01-30T21:00:00",
    "dateReserved": "2015-11-13T00:00:00",
    "dateUpdated": "2024-08-06T08:13:31.058Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-7429 (GCVE-0-2016-7429)

Vulnerability from cvelistv5

Published

2017-01-13 16:00

Modified

2024-08-06 01:57

Severity ?

CWE

Summary

NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a source) by sending a response for a source to an interface the source does not use.

References

URL

Tags

	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0252.html	vendor-advisory, x_refsource_REDHAT
	http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities	x_refsource_CONFIRM
	http://nwtime.org/ntp428p9_release/	x_refsource_CONFIRM
	https://www.kb.cert.org/vuls/id/633847	third-party-advisory, x_refsource_CERT-VN
	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037354	vdb-entry, x_refsource_SECTRACK
	https://bto.bluecoat.com/security-advisory/sa139	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/94453	vdb-entry, x_refsource_BID
	http://support.ntp.org/bin/view/Main/NtpBug3072	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:57:47.553Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
          },
          {
            "name": "RHSA-2017:0252",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nwtime.org/ntp428p9_release/"
          },
          {
            "name": "VU#633847",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/633847"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
          },
          {
            "name": "1037354",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037354"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa139"
          },
          {
            "name": "94453",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94453"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.ntp.org/bin/view/Main/NtpBug3072"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a source) by sending a response for a source to an interface the source does not use."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
        },
        {
          "name": "RHSA-2017:0252",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nwtime.org/ntp428p9_release/"
        },
        {
          "name": "VU#633847",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/633847"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
        },
        {
          "name": "1037354",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037354"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa139"
        },
        {
          "name": "94453",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94453"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.ntp.org/bin/view/Main/NtpBug3072"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7429",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a source) by sending a response for a source to an interface the source does not use."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03706en_us"
            },
            {
              "name": "RHSA-2017:0252",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0252.html"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities"
            },
            {
              "name": "http://nwtime.org/ntp428p9_release/",
              "refsource": "CONFIRM",
              "url": "http://nwtime.org/ntp428p9_release/"
            },
            {
              "name": "VU#633847",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/633847"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
            },
            {
              "name": "1037354",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037354"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa139",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa139"
            },
            {
              "name": "94453",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94453"
            },
            {
              "name": "http://support.ntp.org/bin/view/Main/NtpBug3072",
              "refsource": "CONFIRM",
              "url": "http://support.ntp.org/bin/view/Main/NtpBug3072"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7429",
    "datePublished": "2017-01-13T16:00:00",
    "dateReserved": "2016-09-09T00:00:00",
    "dateUpdated": "2024-08-06T01:57:47.553Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2017:0255-1

Vulnerability from csaf_suse

CVE-2016-7431 (GCVE-0-2016-7431)

Vulnerability from cvelistv5

CVE-2016-7433 (GCVE-0-2016-7433)

Vulnerability from cvelistv5

CVE-2016-7426 (GCVE-0-2016-7426)

Vulnerability from cvelistv5

CVE-2016-9310 (GCVE-0-2016-9310)

Vulnerability from cvelistv5

CVE-2016-7427 (GCVE-0-2016-7427)

Vulnerability from cvelistv5

CVE-2016-7434 (GCVE-0-2016-7434)

Vulnerability from cvelistv5

CVE-2015-8140 (GCVE-0-2015-8140)

Vulnerability from cvelistv5

CVE-2016-7428 (GCVE-0-2016-7428)

Vulnerability from cvelistv5

CVE-2016-9311 (GCVE-0-2016-9311)

Vulnerability from cvelistv5

CVE-2015-5219 (GCVE-0-2015-5219)

Vulnerability from cvelistv5

CVE-2015-8139 (GCVE-0-2015-8139)

Vulnerability from cvelistv5

CVE-2016-7429 (GCVE-0-2016-7429)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature