← Back to branch summary

~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to retired/CVE-2016-1549

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
retired/CVE-2016-1549
1
 
Candidate: CVE-2016-1549
2
 
PublicDate: 2017-01-06
3
 
References:
4
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1549
5
 
 http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security
6
 
 http://www.talosintel.com/reports/TALOS-2016-0083/
7
 
Description:
8
 
 A malicious authenticated peer can create arbitrarily-many ephemeral
9
 
 associations in order to win the clock selection algorithm in ntpd in NTP
10
 
 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and
11
 
 a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim's clock.
12
 
Ubuntu-Description:
13
 
Notes:
14
 
 mdeslaur> upstream proposes mitigation only
15
 
Bugs:
16
 
 http://support.ntp.org/bin/view/Main/NtpBug3012
17
 
Priority: negligible
18
 
Discovered-by: Matthew Van Gundy
19
 
Assigned-to:
20
 
 
21
 
Patches_ntp:
22
 
upstream_ntp: released (1:4.2.8p7+dfsg-1)
23
 
precise_ntp: ignored
24
 
trusty_ntp: ignored
25
 
vivid/stable-phone-overlay_ntp: ignored
26
 
vivid/ubuntu-core_ntp: DNE
27
 
wily_ntp: ignored
28
 
xenial_ntp: ignored
29
 
devel_ntp: ignored