CVE-2016-4954 Race condition in n/a

High 7.5 Published 5 Jul 2016 Updated 6 Aug 2024

Remote attackers can cause denial of service in NTP daemon by sending spoofed packets to trigger incorrect leap indications.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2016-4954?

CVE-2016-4954 is a high-severity vulnerability in Ntp Ntp, published on 5 Jul 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.

Weakness: CWE-362

Which versions are affected by CVE-2016-4954?

It affects 12 products.

Products include Ntp Ntp, Opensuse Leap, Opensuse Opensuse, Oracle Solaris, Siemens Simatic Net Cp 443-1 Opc Ua Firmware, Siemens Tim 4r-Ie Dnp3 Firmware and 6 more.

How do I fix CVE-2016-4954?

Upgrade to a fixed version.

Is CVE-2016-4954 being exploited?

There is no known exploitation of CVE-2016-4954 in the wild and no public exploit code.

All Ntp Ntp vulnerabilities

Sources

Also known as DEBIAN-CVE-2016-4954, GHSA-w5gw-rhc6-c5g8, UBUNTU-CVE-2016-4954.