Improper access control in ntp - CVE-2016-9310

Vulnerability identifier: #VU12305

CSH Severity: Low

CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-9310

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to obtain potentially sensitive information and cause DoS condition on the target system.

The weakness exists in the control mode (mode 6) functionality in ntpd due to improper access control. A remote attacker can set or unset traps via a specially crafted control mode packet, gain access to potentially sensitive information and cause the service to crash.

ntp
Amazon Linux AMI
Arch Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux EUS Compute Node
Junos OS
Fedora
Junos OS Evolved
ntp
Virtualization Engine TS7700 3957-V06
Virtualization Engine TS7700 3957-VEA
Virtualization Engine TS7700 3957-VEB
Virtualization Engine TS7700 3957-V07
Virtualization Engine TS7700 3957-VEC

Update to version 4.2.8p9.

Junos OS - addressed in versions 12.3X48-D95, 12.3R12-S15, 14.1X53-D53, 15.1x49-D190, 15.1R7-S6, 16.1R7-S6, 16.2R3, 17.1R2-S11, 17.1R3-S1, 17.2R1-S9, 17.2R2-S8, 17.2R3-S3, 17.3R2-S5, 17.3R3-S6, 17.4R2-S7, 17.4R3, 18.1R3-S8, 18.2R2-S7, 18.2R3-S1, 18.3R1-S5, 18.3R2-S2, 18.3R3, 18.4R1-S4, 18.4R2-S1, 18.4R3, 19.1R1-S3, 19.1R2, 19.2R1-S1, 19.2R2, 19.3R1
ntp - addressed in versions 4.2.6p5-43.fc23, 4.2.6p5-43.fc24, 4.2.6p5-43.fc25
Virtualization Engine TS7700 3957-V06 - update to 8.21.0.178 VTD_EXEC.103 VTD_EXEC.279
Virtualization Engine TS7700 3957-VEA - update to 8.21.0.178 VTD_EXEC.103 VTD_EXEC.279
Virtualization Engine TS7700 3957-VEB - addressed in versions 8.33.3.14 VTD_EXEC.279, 8.40.2.12 VTD_EXEC.279, 8.41.101.10 VTD_EXEC.103 VTD_EXEC.279, 8.41.200.113 VTD_EXEC.279
Virtualization Engine TS7700 3957-V07 - addressed in versions 8.33.3.14 VTD_EXEC.279, 8.40.2.12 VTD_EXEC.279, 8.41.101.10 VTD_EXEC.103 VTD_EXEC.279, 8.41.200.113 VTD_EXEC.279
Virtualization Engine TS7700 3957-VEC - addressed in versions 8.40.2.12 VTD_EXEC.279, 8.41.101.10 VTD_EXEC.103, 8.41.200.113 VTD_EXEC.279
Junos OS Evolved - update to 20.1R1-EVO

• https://www.nwtime.org/ntp428p9_release/

• Amazon Linux AMI update for ntp
• Red Hat update for ntp
• Arch Linux update for ntp
• Multiple NTP vulnerabilities in Junos OS and Junos OS Evolved
• Multiple vulnerabilities in IBM Virtualization Engine TS7700
• Fedora 24 update for ntp
• Fedora 25 update for ntp
• Fedora 23 update for ntp