CVE-2016-9310 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.5 MEDIUM	NETWORK	LOW	NONE	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 88%

Affected Products (NVD)

Vendor	Product	Version
ntp	ntp	𝑥 ≤ 4.2.8

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

ntp

bullseye	1:4.2.8p15+dfsg-1 fixed
jessie	no-dsa
wheezy	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

ntp

artful	not-affected
bionic	not-affected
cosmic	not-affected
precise	ignored
trusty	Fixed 1:4.2.6.p5+dfsg-3ubuntu2.14.04.11 released
xenial	Fixed 1:4.2.8p4+dfsg-3ubuntu5.5 released
yakkety	Fixed 1:4.2.8p8+dfsg-1ubuntu2.1 released
zesty	not-affected

Red Hat Enterprise Linux Releases

Red Hat Product

Release

ntp

RHEL 6	0:4.2.6p5-10.el6_8.2 fixed
RHEL 7	0:4.2.6p5-25.el7_3.1 fixed

ntp-doc

RHEL 6	0:4.2.6p5-10.el6_8.2 fixed
RHEL 7	0:4.2.6p5-25.el7_3.1 fixed

ntp-perl

RHEL 6	0:4.2.6p5-10.el6_8.2 fixed
RHEL 7	0:4.2.6p5-25.el7_3.1 fixed

ntpdate

RHEL 6	0:4.2.6p5-10.el6_8.2 fixed
RHEL 7	0:4.2.6p5-25.el7_3.1 fixed

sntp

RHEL 7

0:4.2.6p5-25.el7_3.1

fixed

Common Weakness Enumeration

CWE-400 - Uncontrolled Resource Consumption
The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References

http://nwtime.org/ntp428p9_release/

http://rhn.redhat.com/errata/RHSA-2017-0252.html

http://support.ntp.org/bin/view/Main/NtpBug3118

http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

http://www.securityfocus.com/bid/94452

http://www.securitytracker.com/id/1037354

https://bto.bluecoat.com/security-advisory/sa139

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03799en_us

https://usn.ubuntu.com/3707-2/

https://www.kb.cert.org/vuls/id/633847