CVE-2016-7426

high-risk
Published 2017-01-13

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.

Do I need to act?

!
11.7% chance of exploitation in next 30 days
EPSS score — higher than 88% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (20)

Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp
Ntp

Affected Vendors

Ntp Hpe Canonical Redhat

References (22)

Third Party Advisory http://nwtime.org/ntp428p9_release/
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0252.html
Issue Tracking http://support.ntp.org/bin/view/Main/NtpBug3071
Release Notes http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
Third Party Advisory http://www.securityfocus.com/bid/94451
Third Party Advisory http://www.securitytracker.com/id/1037354
Third Party Advisory https://bto.bluecoat.com/security-advisory/sa139
Third Party Advisory https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na...
Third Party Advisory https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc
Third Party Advisory https://usn.ubuntu.com/3707-2/
Third Party Advisory https://www.kb.cert.org/vuls/id/633847
Third Party Advisory http://nwtime.org/ntp428p9_release/
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2017-0252.html
Issue Tracking http://support.ntp.org/bin/view/Main/NtpBug3071
Release Notes http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
Third Party Advisory http://www.securityfocus.com/bid/94451
Third Party Advisory http://www.securitytracker.com/id/1037354
Third Party Advisory https://bto.bluecoat.com/security-advisory/sa139
Third Party Advisory https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na...
Third Party Advisory https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc
and 2 more references
66
/ 100
high-risk
Severity 26/34 · High
Exploitability 11/34 · Low
Exposure 29/34 · Critical