Security restrictions bypass in Network Time Protocol - CVE-2016-1549

Vulnerability identifier: #VU10806

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-1549

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass security restrictions on the target system.

The weakness exists due to insufficient security restrictions. A remote attacker can create multiple crafted ephemeral associations to bypass security restrictions and modify the clock.

Network Time Protocol
Arch Linux
Amazon Linux AMI
IBM AIX
Slackware Linux
Fedora
ntp

Install update from vendor's website.

ntp - addressed in versions 4.2.8p11-1.fc26, 4.2.8p11-1.fc27

• http://support.ntp.org/bin/view/Main/NtpBug3012

• Multiple vulnerabilities in Network Time Protocol
• Slackware Linux update for ntp
• Arch Linux update for ntp
• Amazon Linux AMI update for ntp
• Multiple vulnerabilities in IBM AIX
• Slackware Linux update for ntp
• Amazon Linux AMI update for ntp
• Fedora 27 update for ntp
• Fedora 26 update for ntp