CVE-2016-7431 REJECTED

NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.

EPSS 18.62% · 95.2th percentile

Risk Scores

EPSS Score
18.62%
95.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSntp1:4.2.8p4+dfsg-3ubuntu5.2, 1:4.2.6.p5+dfsg-3ubuntu8, 1:4.2.6.p5+dfsg-3ubuntu8.1
Ubuntu:14.04:LTSntp1:4.2.6.p5+dfsg-3ubuntu2, 1:4.2.6.p5+dfsg-3ubuntu2.14.04.1, 1:4.2.6.p5+dfsg-3ubuntu2.14.04.2

Timeline

References

Open in Interactive Console →