Detections
Analytics
CVE-2016-9042
medium
Description
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
References
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc
https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf
http://www.securitytracker.com/id/1039427
https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
https://support.f5.com/csp/article/K39041624
https://support.apple.com/kb/HT208144
https://kc.mcafee.com/corporate/index?page=content&id=SB10201
https://bto.bluecoat.com/security-advisory/sa147
http://www.ubuntu.com/usn/USN-3349-1
http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded
http://www.securityfocus.com/archive/1/540403/100/0/threaded
http://seclists.org/fulldisclosure/2017/Sep/62
http://seclists.org/fulldisclosure/2017/Nov/7
http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html
http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html