| Package | Affected versions | Patched versions |
|---|---|---|
| ntp | = 4.3.0= 4.3.1= 4.3.10= 4.3.11= 4.3.12= 4.3.13= 4.3.14= 4.3.15= 4.3.16= 4.3.17= 4.3.18= 4.3.19= 4.3.2= 4.3.20= 4.3.21= 4.3.22= 4.3.23= 4.3.24= 4.3.25= 4.3.26= 4.3.27= 4.3.28= 4.3.29= 4.3.3= 4.3.30= 4.3.31= 4.3.32= 4.3.33= 4.3.34= 4.3.35= 4.3.36= 4.3.37= 4.3.38= 4.3.39= 4.3.4= 4.3.40= 4.3.41= 4.3.42= 4.3.43= 4.3.44= 4.3.45= 4.3.46= 4.3.47= 4.3.48= 4.3.49= 4.3.5= 4.3.50= 4.3.51= 4.3.52= 4.3.53= 4.3.54= 4.3.55= 4.3.56= 4.3.57= 4.3.58= 4.3.59= 4.3.6= 4.3.60= 4.3.61= 4.3.62= 4.3.63= 4.3.64= 4.3.65= 4.3.66= 4.3.67= 4.3.68= 4.3.69= 4.3.7= 4.3.70= 4.3.71= 4.3.72= 4.3.73= 4.3.74= 4.3.75= 4.3.76= 4.3.77= 4.3.78= 4.3.79= 4.3.8= 4.3.80= 4.3.81= 4.3.82= 4.3.83= 4.3.84= 4.3.85= 4.3.86= 4.3.87= 4.3.88= 4.3.89= 4.3.9= 4.3.90= 4.3.91≤ 4.2.8 |
NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, controlkey, or requestkey. NOTE: this vulnerability exists because of a CVE-2016-2516 regression.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free