ntp: incomplete checks in ntp_crypto.c
Published Aug 7, 2017
7.5
HIGHCVSS 3.1
EPSS 7.10%
Description
The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.
Affected products
No data.
Configuration 1
- ≥ 4.2.0 · < 4.2.8
- ≥ 4.3.0 · < 4.3.77
- 4.2.8
- 4.2.8
- 4.2.8
- 4.2.8
- 4.2.8
- 4.2.8
- 4.2.8
- 4.2.8
- 4.2.8
- 4.2.8
- 4.2.8
- 4.2.8
- 4.2.8
- 4.2.8
- 4.2.8
- 4.2.8
- 4.2.8
Configuration 3
- 7.0
- 8.0
- 9.0
Configuration 4
- n/a
- n/a
- n/a
- n/a
Configuration 5
- 6.0
- 7.0
- 6.0
- 7.0
- 7.3
- 7.4
- 7.6
- 7.7
- 7.3
- 7.4
- 7.5
- 7.6
- 7.7
- 7.3
- 7.6
- 7.7
- 6.0
- 7.0
No data.
Red Hat Enterprise Linux 6
ntp-0:4.2.6p5-10.el6
Fixed · RHSA-2016:0780
Red Hat Enterprise Linux 7
ntp-0:4.2.6p5-25.el7
Fixed · RHSA-2016:2583
Red Hat Enterprise Linux 5
ntp
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | ntp-0:4.2.6p5-10.el6 | Fixed | RHSA-2016:0780 |
| Red Hat Enterprise Linux 7 | ntp-0:4.2.6p5-25.el7 | Fixed | RHSA-2016:2583 |
| Red Hat Enterprise Linux 5 | ntp | Will not fix | n/a |
No package ranges for this CVE.
Remediation
Red Hat mitigation
Disable NTP autokey authentication by removing, or commenting out, all configuration directives beginning with the 'crypto' keyword in your ntp.conf file.
References (15)
- http://rhn.redhat.com/errata/RHSA-2016-0780.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2583.html vendor-advisoryx_refsource_REDHATThird Party Advisory
- http://support.ntp.org/bin/view/Main/NtpBug2899 x_refsource_CONFIRMVendor Advisory
- http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_Security_Vulner
- http://www.debian.org/security/2015/dsa-3388 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html x_refsource_CONFIRMThird Party Advisory
- http://www.securityfocus.com/bid/77274 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1033951 vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
- https://access.redhat.com/security/cve/CVE-2015-7691 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1274254 x_refsource_CONFIRMIssue TrackingThird Party AdvisoryVDB Entry
- https://github.com/ntp-project/ntp/blob/stable/NEWS#L11
- https://nvd.nist.gov/vuln/detail/CVE-2015-7691
- https://security.gentoo.org/glsa/201607-15 vendor-advisoryx_refsource_GENTOOThird Party AdvisoryVDB Entry
- https://security.netapp.com/advisory/ntap-20171004-0001/ x_refsource_CONFIRMThird Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2015-7691
Change history (0)
No recorded changes yet.