ByteOS Network

CVE Vulnerability Details :

CVE-2015-7974

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-26 Jan, 2016 | 19:00

Updated At-06 Aug, 2024 | 08:06

▼CVE Numbering Authority (CNA)

NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.talosintel.com/reports/TALOS-2016-0071/	x_refsource_MISC
http://www.debian.org/security/2016/dsa-3629	vendor-advisory x_refsource_DEBIAN
http://www.securityfocus.com/bid/81960	vdb-entry x_refsource_BID
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us	x_refsource_CONFIRM
http://support.ntp.org/bin/view/Main/NtpBug2936	x_refsource_CONFIRM
http://www.securitytracker.com/id/1034782	vdb-entry x_refsource_SECTRACK
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-2583.html	vendor-advisory x_refsource_REDHAT
https://security.netapp.com/advisory/ntap-20171031-0001/	x_refsource_CONFIRM
http://bugs.ntp.org/show_bug.cgi?id=2936	x_refsource_CONFIRM
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory x_refsource_FREEBSD
https://security.gentoo.org/glsa/201607-15	vendor-advisory x_refsource_GENTOO
https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf	x_refsource_CONFIRM
https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11	x_refsource_MISC

Hyperlink: http://www.talosintel.com/reports/TALOS-2016-0071/

Resource:

x_refsource_MISC

Hyperlink: http://www.debian.org/security/2016/dsa-3629

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://www.securityfocus.com/bid/81960

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us

Resource:

x_refsource_CONFIRM

Hyperlink: http://support.ntp.org/bin/view/Main/NtpBug2936

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1034782

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us

Resource:

x_refsource_CONFIRM

Hyperlink: http://rhn.redhat.com/errata/RHSA-2016-2583.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://security.netapp.com/advisory/ntap-20171031-0001/

Resource:

x_refsource_CONFIRM

Hyperlink: http://bugs.ntp.org/show_bug.cgi?id=2936

Resource:

x_refsource_CONFIRM

Hyperlink: https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc

Resource:

vendor-advisory

x_refsource_FREEBSD

Hyperlink: https://security.gentoo.org/glsa/201607-15

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf

Resource:

x_refsource_CONFIRM

Hyperlink: https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.talosintel.com/reports/TALOS-2016-0071/	x_refsource_MISC x_transferred
http://www.debian.org/security/2016/dsa-3629	vendor-advisory x_refsource_DEBIAN x_transferred
http://www.securityfocus.com/bid/81960	vdb-entry x_refsource_BID x_transferred
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03766en_us	x_refsource_CONFIRM x_transferred
http://support.ntp.org/bin/view/Main/NtpBug2936	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id/1034782	vdb-entry x_refsource_SECTRACK x_transferred
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03750en_us	x_refsource_CONFIRM x_transferred
http://rhn.redhat.com/errata/RHSA-2016-2583.html	vendor-advisory x_refsource_REDHAT x_transferred
https://security.netapp.com/advisory/ntap-20171031-0001/	x_refsource_CONFIRM x_transferred
http://bugs.ntp.org/show_bug.cgi?id=2936	x_refsource_CONFIRM x_transferred
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:09.ntp.asc	vendor-advisory x_refsource_FREEBSD x_transferred
https://security.gentoo.org/glsa/201607-15	vendor-advisory x_refsource_GENTOO x_transferred
https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf	x_refsource_CONFIRM x_transferred
https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11	x_refsource_MISC x_transferred