Base Score

MEDIUM5.3

CVE-2016-7431

NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.

VectorNETWORK

Published Bycve@mitre.org

Published DateJan 13, 2017, 16:59

Weakness Type (CWE):CWE-20

CVSS Metrics

Base Score

5.3

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Base Severity

MEDIUM

Version

3.0

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

LOW

Availability (A)

NONE

References

http://lists.opensuse.org/opensuse-updates/2016-12/msg00153.html
http://nwtime.org/ntp428p9_release/
http://packetstormsecurity.com/files/140240/FreeBSD-Security-Advisory-FreeBSD-SA-16.39.ntp.html
http://support.ntp.org/bin/view/Main/NtpBug3102
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-en
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
http://www.securityfocus.com/archive/1/539955/100/0/threaded
http://www.securityfocus.com/archive/1/540254/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/539955/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/540254/100/0/threaded
http://www.securityfocus.com/bid/94454
http://www.securitytracker.com/id/1037354
http://www.ubuntu.com/usn/USN-3349-1
https://bto.bluecoat.com/security-advisory/sa139
https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc
https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03883en_us
https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03899en_us
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_us
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03899en_us
https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-223/
https://www.kb.cert.org/vuls/id/633847

Base Score

MEDIUM5.3

Weakness Type (CWE):CWE-20

CVSS Metrics

Base Score

5.3

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Base Severity

MEDIUM

Version

3.0

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

LOW

Availability (A)

NONE