CVE-2015-1799 Denial of service in n/a
Man-in-the-middle attackers can cause denial of service in NTP by spoofing peer IP addresses to trigger synchronization loss.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-1799?
CVE-2015-1799 is a medium-severity denial of service vulnerability in Ntp Ntp, published on 8 Apr 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service (synchronization loss) by spoofing the source IP address of a peer.
Weakness: CWE-17
Which versions are affected by CVE-2015-1799?
It affects 1 product.
Products include Ntp Ntp.
How do I fix CVE-2015-1799?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2015-1799 being exploited?
There is no known exploitation of CVE-2015-1799 in the wild and no public exploit code.
Other vulnerabilities in Ntp Ntp
Sources
Also known as DEBIAN-CVE-2015-1799, GHSA-q9p8-4cvj-q5fj, UBUNTU-CVE-2015-1799.