CVE-2015-7974
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 5.7%
NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
Affected products
n/a · n/aReferences
http://bugs.ntp.org/show_bug.cgi?id=2936http://rhn.redhat.com/errata/RHSA-2016-2583.htmlhttps://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdfhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_ushttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_ushttps://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.aschttps://security.gentoo.org/glsa/201607-15https://security.netapp.com/advisory/ntap-20171031-0001/http://support.ntp.org/bin/view/Main/NtpBug2936https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11http://www.debian.org/security/2016/dsa-3629http://www.securityfocus.com/bid/81960