CVE-2015-3405

high-risk
Published 2017-08-09

ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 keys via a brute force attack with the 93 possible keys.

Do I need to act?

!
16.6% chance of exploitation in next 30 days
EPSS score — higher than 83% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (20)

Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp

Affected Vendors

Opensuse Ntp Opensuse Project Debian Redhat Fedoraproject Suse

References (28)

Third Party Advisory http://bk1.ntp.org/ntp-stable/?PAGE=patch&REV=55199296N2gFqH1Hm5GOnhrk9Ypygg
Third Party Advisory http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156248.html
Third Party Advisory http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00000.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2015-1459.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2015-2231.html
Third Party Advisory http://www.debian.org/security/2015/dsa-3223
Third Party Advisory http://www.debian.org/security/2015/dsa-3388
Mailing List http://www.openwall.com/lists/oss-security/2015/04/23/14
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.h...
Third Party Advisory http://www.securityfocus.com/bid/74045
Issue Tracking https://bugs.ntp.org/show_bug.cgi?id=2797
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1210324
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpe...
Third Party Advisory http://bk1.ntp.org/ntp-stable/?PAGE=patch&REV=55199296N2gFqH1Hm5GOnhrk9Ypygg
Third Party Advisory http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156248.html
Third Party Advisory http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00000.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2015-1459.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2015-2231.html
Third Party Advisory http://www.debian.org/security/2015/dsa-3223
and 8 more references
61
/ 100
high-risk
Severity 26/34 · High
Exploitability 13/34 · Low
Exposure 22/34 · High