CVE-2016-7428 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	4.3 MEDIUM	ADJACENT_NETWORK	LOW	NONE	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 88%

Vendor	Product	Version
ntp	ntp	4.2.8:p6
ntp	ntp	4.2.8:p7
ntp	ntp	4.2.8:p8

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

ntp

bullseye	1:4.2.8p15+dfsg-1 fixed
jessie	not-affected
wheezy	not-affected

Ubuntu Releases

Ubuntu Product

Codename

ntp

cosmic	not-affected
bionic	not-affected
artful	not-affected
zesty	not-affected
yakkety	Fixed 1:4.2.8p8+dfsg-1ubuntu2.1 released
xenial	Fixed 1:4.2.8p4+dfsg-3ubuntu5.5 released
trusty	Fixed 1:4.2.6.p5+dfsg-3ubuntu2.14.04.11 released
precise	ignored

Common Weakness Enumeration

CWE-400 - Uncontrolled Resource Consumption
The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References

http://nwtime.org/ntp428p9_release/

http://support.ntp.org/bin/view/Main/NtpBug3113

http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

http://www.securityfocus.com/bid/94446

http://www.securitytracker.com/id/1037354

https://bto.bluecoat.com/security-advisory/sa139

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_us

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03899en_us

https://usn.ubuntu.com/3707-2/

https://www.kb.cert.org/vuls/id/633847

http://nwtime.org/ntp428p9_release/

http://support.ntp.org/bin/view/Main/NtpBug3113

http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

http://www.securityfocus.com/bid/94446

http://www.securitytracker.com/id/1037354

https://bto.bluecoat.com/security-advisory/sa139

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_us

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03899en_us

https://usn.ubuntu.com/3707-2/

https://www.kb.cert.org/vuls/id/633847