Lucene search
PRIOn knowledge basePRION:CVE-2015-7871HistoryAug 07, 2017 - 8:29 p.m.
Authentication flaw
2017-08-0720:29:00
PRIOn knowledge base
www.prio-n.com
11
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 7.0 | |
| debian_linux | eq | 9.0 | |
| ntp | eq | 4.2.5 p238-rc1 | |
| ntp | eq | 4.2.5 p240-rc1 | |
| ntp | eq | 4.2.5 p210 | |
| ntp | eq | 4.2.5 p199 | |
| ntp | eq | 4.2.5 p212 | |
| ntp | eq | 4.2.5 p207 | |
| ntp | eq | 4.2.5 p244-rc1 |
References
support.ntp.org/bin/view/Main/NtpBug2941
www.debian.org/security/2015/dsa-3388
www.securityfocus.com/bid/77287
www.securitytracker.com/id/1033951
bugzilla.redhat.com/show_bug.cgi?id=1274265
cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839
security.gentoo.org/glsa/201604-03
security.gentoo.org/glsa/201607-15
security.netapp.com/advisory/ntap-20171004-0001/
Related
f5
f5
SOL17518 - NTP vulnerability CVE-2015-7871
2015-11-02 00:00:00
K17518 : NTP vulnerability CVE-2015-7871
2015-11-10 00:00:00
ubuntucve
ubuntucve
CVE-2015-7871
2015-10-22 00:00:00
checkpoint_advisories
checkpoint_advisories
NTP Servers Symmetric Association Authentication Bypass (CVE-2015-7871)
2015-10-24 00:00:00
cve
cve
CVE-2015-7871
2017-08-07 20:29:00
nvd
nvd
CVE-2015-7871
2017-08-07 20:29:00
nessus
nessus
Rockwell Automation Stratix NAK to the Future: NTP Symmetric Association Authentication Bypass (CVE-2015-7871)
2023-11-15 00:00:00
F5 Networks BIG-IP : NTP vulnerability (SOL17518)
2016-01-28 00:00:00
EulerOS Virtualization 2.5.3 : ntp (EulerOS-SA-2019-1222)
2019-04-09 00:00:00
cvelist
cvelist
CVE-2015-7871
2017-08-07 20:00:00
debiancve
debiancve
CVE-2015-7871
2017-08-07 20:29:00
talos
talos
openvas
openvas
Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2019-1222)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2019-1719)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2019-2066)
2020-01-23 00:00:00
ics
ics
Siemens RUGGEDCOM ROX-based Devices NTP Vulnerabilities
2018-08-27 12:00:00
Siemens TIM 4R-IE Devices
2021-04-13 12:00:00
Rockwell Automation Stratix 5900
2017-05-10 12:00:00
ibm
ibm
mageia
mageia
Updated ntp packages fixes security vulnerabilities
2015-10-26 00:50:36
fedora
fedora
[SECURITY] Fedora 23 Update: ntp-4.2.6p5-34.fc23
2015-11-02 18:55:43
[SECURITY] Fedora 21 Update: ntp-4.2.6p5-34.fc21
2015-11-04 22:51:44
[SECURITY] Fedora 22 Update: ntp-4.2.6p5-36.fc22
2016-02-21 02:33:52
amazon
amazon
Important: ntp
2015-10-27 16:42:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:25.ntp
2015-10-26 00:00:00
freebsd
freebsd
ntp -- 13 low- and medium-severity vulnerabilities
2015-10-21 00:00:00
arista
arista
Security Advisory 0016
2015-11-04 00:00:00
archlinux
archlinux
ntp: multiple issues
2015-10-22 00:00:00
osv
osv
ntp - security update
2015-11-01 00:00:00
ntp - security update
2015-10-28 00:00:00
securityvulns
securityvulns
ntp multiple security vulnerabilities
2015-11-01 00:00:00
[USN-2783-1] NTP vulnerabilities
2015-11-01 00:00:00
slackware
slackware
[slackware-security] ntp
2015-10-29 22:49:05
symantec
symantec
SA103 : October 2015 NTP Security Vulnerabilities
2015-11-24 08:00:00
cisco
cisco
Multiple Vulnerabilities in ntpd Affecting Cisco Products - October 2015
2015-10-21 23:00:00
debian
debian
[SECURITY] [DLA 335-1] ntp security update
2015-10-28 20:45:05
[SECURITY] [DSA 3388-1] ntp security update
2015-11-01 22:20:55
ubuntu
ubuntu
NTP vulnerabilities
2015-10-27 00:00:00
suse
suse
Security update for ntp (important)
2016-05-06 13:07:50
Security update for ntp (important)
2016-05-17 15:09:17
Security update for yast2-ntp-client (important)
2016-08-17 21:08:25
gentoo
gentoo
NTP: Multiple vulnerabilities
2016-07-20 00:00:00
Xen: Multiple vulnerabilities
2016-04-05 00:00:00