An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key. (CVE-2016-1550)
Impact
This vulnerability may allow an attacker to conduct a timing attack and compute the value of the valid authentication digest, causing forged packets to be accepted by ntpd.

nvd 1

talos 1

ubuntucve 1

cve 1

f5 1

nessus 37

seebug 1

cvelist 1

veracode 1

prion 1

debiancve 1

openvas 21