| Package | Affected versions | Patched versions |
|---|---|---|
| hpux-ntp | < c.4.2.8.4.0 | c.4.2.8.4.0 |
| ntp | = 4.2.8≥ 4.2.0, < 4.2.8≥ 4.3.0, < 4.3.92 | 4.2.84.3.92 |
| router manager | ≥ 1.1, < 1.1.6-6931-3 | 1.1.6-6931-3 |
| skynas | < 6.1.5-15254 | 6.1.5-15254 |
| virtual diskstation manager | < 6.1.6-15266 | 6.1.6-15266 |
ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free