7.5

CVE-2016-7426

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ntp ≫ Ntp Version >= 4.2.6 < 4.2.8
Ntp ≫ Ntp Version >= 4.3.0 < 4.3.94
Ntp ≫ Ntp Version 4.2.5 Update p203
Ntp ≫ Ntp Version 4.2.5 Update p204
Ntp ≫ Ntp Version 4.2.5 Update p205
Ntp ≫ Ntp Version 4.2.5 Update p206
Ntp ≫ Ntp Version 4.2.5 Update p207
Ntp ≫ Ntp Version 4.2.5 Update p208
Ntp ≫ Ntp Version 4.2.5 Update p209
Ntp ≫ Ntp Version 4.2.5 Update p210
Ntp ≫ Ntp Version 4.2.5 Update p211
Ntp ≫ Ntp Version 4.2.5 Update p212
Ntp ≫ Ntp Version 4.2.5 Update p213
Ntp ≫ Ntp Version 4.2.5 Update p214
Ntp ≫ Ntp Version 4.2.5 Update p215
Ntp ≫ Ntp Version 4.2.5 Update p216
Ntp ≫ Ntp Version 4.2.5 Update p217
Ntp ≫ Ntp Version 4.2.5 Update p218
Ntp ≫ Ntp Version 4.2.5 Update p219
Ntp ≫ Ntp Version 4.2.5 Update p220
Ntp ≫ Ntp Version 4.2.5 Update p221
Ntp ≫ Ntp Version 4.2.5 Update p222
Ntp ≫ Ntp Version 4.2.5 Update p223
Ntp ≫ Ntp Version 4.2.5 Update p224
Ntp ≫ Ntp Version 4.2.5 Update p225
Ntp ≫ Ntp Version 4.2.5 Update p226
Ntp ≫ Ntp Version 4.2.5 Update p227
Ntp ≫ Ntp Version 4.2.5 Update p228
Ntp ≫ Ntp Version 4.2.5 Update p229
Ntp ≫ Ntp Version 4.2.5 Update p230
Ntp ≫ Ntp Version 4.2.5 Update p231_rc1
Ntp ≫ Ntp Version 4.2.5 Update p232_rc1
Ntp ≫ Ntp Version 4.2.5 Update p233_rc1
Ntp ≫ Ntp Version 4.2.5 Update p234_rc1
Ntp ≫ Ntp Version 4.2.5 Update p235_rc1
Ntp ≫ Ntp Version 4.2.5 Update p236_rc1
Ntp ≫ Ntp Version 4.2.5 Update p237_rc1
Ntp ≫ Ntp Version 4.2.5 Update p238_rc1
Ntp ≫ Ntp Version 4.2.5 Update p239_rc1
Ntp ≫ Ntp Version 4.2.5 Update p240_rc1
Ntp ≫ Ntp Version 4.2.5 Update p241_rc1
Ntp ≫ Ntp Version 4.2.5 Update p242_rc1
Ntp ≫ Ntp Version 4.2.5 Update p243_rc1
Ntp ≫ Ntp Version 4.2.5 Update p244_rc1
Ntp ≫ Ntp Version 4.2.5 Update p245_rc1
Ntp ≫ Ntp Version 4.2.5 Update p246_rc1
Ntp ≫ Ntp Version 4.2.5 Update p247_rc1
Ntp ≫ Ntp Version 4.2.5 Update p248_rc1
Ntp ≫ Ntp Version 4.2.5 Update p249_rc1
Ntp ≫ Ntp Version 4.2.5 Update p250_rc1
Ntp ≫ Ntp Version 4.2.8 Update -
Ntp ≫ Ntp Version 4.2.8 Update p1
Ntp ≫ Ntp Version 4.2.8 Update p1-beta1
Ntp ≫ Ntp Version 4.2.8 Update p1-beta2
Ntp ≫ Ntp Version 4.2.8 Update p1-beta3
Ntp ≫ Ntp Version 4.2.8 Update p1-beta4
Ntp ≫ Ntp Version 4.2.8 Update p1-beta5
Ntp ≫ Ntp Version 4.2.8 Update p1-rc1
Ntp ≫ Ntp Version 4.2.8 Update p1-rc2
Ntp ≫ Ntp Version 4.2.8 Update p2
Ntp ≫ Ntp Version 4.2.8 Update p2-rc1
Ntp ≫ Ntp Version 4.2.8 Update p2-rc2
Ntp ≫ Ntp Version 4.2.8 Update p2-rc3
Ntp ≫ Ntp Version 4.2.8 Update p3
Ntp ≫ Ntp Version 4.2.8 Update p3-rc1
Ntp ≫ Ntp Version 4.2.8 Update p3-rc2
Ntp ≫ Ntp Version 4.2.8 Update p3-rc3
Ntp ≫ Ntp Version 4.2.8 Update p4
Ntp ≫ Ntp Version 4.2.8 Update p5
Ntp ≫ Ntp Version 4.2.8 Update p6
Ntp ≫ Ntp Version 4.2.8 Update p7
Ntp ≫ Ntp Version 4.2.8 Update p8
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition esm
Hpe ≫ Hpux-ntp Version >= b.11.31 < c.4.2.8.2.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 12.47% 0.957
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
Vendor Advisory
Release Notes
http://nwtime.org/ntp428p9_release/
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0252.html
Third Party Advisory
http://support.ntp.org/bin/view/Main/NtpBug3071
Vendor Advisory
Issue Tracking
Mitigation
http://www.securityfocus.com/bid/94451
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037354
Third Party Advisory
VDB Entry
https://bto.bluecoat.com/security-advisory/sa139
Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us
Third Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc
Third Party Advisory
https://usn.ubuntu.com/3707-2/
Third Party Advisory
https://www.kb.cert.org/vuls/id/633847
Third Party Advisory
US Government Resource