CVE-2016-9042

MEDIUM

ntp 4.2.8p9 - Unauthenticated Denial of Service via Origin Timestamp Check Bypass

Title source: llm

Description

An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.

References (21)

Core 21

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1038123

Third Party Advisory vendor-advisory x_refsource_freebsd

https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1039427

Permissions Required, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/97046

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-3349-1

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded

Mailing List mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2017/Nov/7

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/540403/100/0/threaded

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/

Mailing List mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2017/Sep/62

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded

Third Party Advisory x_refsource_confirm

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us

Exploit, Mitigation, Third Party Advisory x_refsource_misc

https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260

Exploit, Third Party Advisory x_refsource_misc

http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html

Vendor Advisory x_refsource_confirm

https://kc.mcafee.com/corporate/index?page=content&id=SB10201

Vendor Advisory x_refsource_confirm

https://support.apple.com/kb/HT208144

Vendor Advisory x_refsource_confirm

https://support.f5.com/csp/article/K39041624

Various Sources x_refsource_confirm

https://bto.bluecoat.com/security-advisory/sa147

Exploit, Third Party Advisory x_refsource_misc

http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html

Third Party Advisory x_refsource_confirm

https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf

Third Party Advisory, US Government Resource x_refsource_misc

https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11

Scores

CVSS v3 5.9

EPSS 0.0178

EPSS Percentile 82.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-20

Status published

Products (5)

freebsd/freebsd 10.0

freebsd/freebsd 11.0

hpe/hpux-ntp < c.4.2.8.4.0

ntp/ntp 4.2.8 p9

siemens/simatic_net_cp_443-1_opc_ua_firmware

Published Jun 04, 2018

Tracked Since Feb 18, 2026