NTP CVE-2015-1799 Denial of Service Vulnerability
BID:73950
Info
NTP CVE-2015-1799 Denial of Service Vulnerability
| Bugtraq ID: | 73950 |
| Class: | Unknown |
| CVE: |
CVE-2015-1799 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 07 2015 12:00AM |
| Updated: | May 23 2017 04:24PM |
| Credit: | Miroslav Lichvár of Red Hat |
| Vulnerable: |
Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Slackware Slackware Linux 14.1 Slackware Slackware Linux 14.0 Slackware Slackware Linux 13.37 Slackware Slackware Linux 13.1 Slackware Slackware Linux 13.0 Rockwell Automation Stratix 5900 0 Oracle Linux 0 Oracle Enterprise Linux 7 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Meinberg NTP 0 Meinberg Network Time Protocol 4.2.8 Meinberg Network Time Protocol 4.2.7 Meinberg Network Time Protocol 4.2.6 IBM Vios 2.2.3 IBM Vios 2.2.1 4 IBM Vios 2.2 IBM Vios 2.2.4.0 IBM Vios 2.2.3.50 IBM Vios 2.2.3.4 IBM Vios 2.2.3.3 IBM Vios 2.2.3.2 IBM Vios 2.2.3.0 IBM Vios 2.2.2.6 IBM Vios 2.2.2.5 IBM Vios 2.2.2.4 IBM Vios 2.2.2.0 IBM Vios 2.2.1.9 IBM Vios 2.2.1.8 IBM Vios 2.2.1.3 IBM Vios 2.2.1.1 IBM Vios 2.2.1.0 IBM Vios 2.2.0.13 IBM Vios 2.2.0.12 IBM Vios 2.2.0.11 IBM Vios 2.2.0.10 IBM SmartCloud Provisioning for Software Virtual Appliance 2.1 IBM SmartCloud Entry 3.2 IBM SmartCloud Entry 3.1 IBM SmartCloud Entry 2.2 IBM SmartCloud Entry 3.2.0.4 Appliance FP IBM SmartCloud Entry 3.1.0.4 Appliance FP IBM SmartCloud Entry 2.4.0.3 Appliance FP IBM SmartCloud Entry 2.4.0 IBM SmartCloud Entry 2.3.0.3 Appliance FP IBM SmartCloud Entry 2.3.0 IBM SmartCloud Entry 2.2.0.3 Appliance FP IBM Smart Analytics System 7710 0 IBM Smart Analytics System 7700 0 IBM Smart Analytics System 7600 0 IBM Smart Analytics System 5600 3 IBM Smart Analytics System 5600 2 IBM Smart Analytics System 5600 1 IBM Security Network Protection 5.3 IBM Security Network Protection 5.2.0 IBM Security Access Manager for Mobile 8.0.1.3 IBM Security Access Manager for Mobile 8.0.1.2 IBM Security Access Manager for Mobile 8.0.1.1 IBM Security Access Manager for Mobile 8.0.0.0 IBM Security Access Manager 9.0 IBM PureData System for Operational Analytics 1.1 (A1801) IBM PureData System for Operational Analytics 1.0 (A1791) IBM Flex System Manager 1.3.2 0 IBM Flex System Manager 1.3.4.0 IBM Flex System Manager 1.3.3.0 IBM Flex System Manager 1.3.1.0 IBM Flex System Manager 1.3.0.1 IBM Flex System Manager 1.3.0.0 IBM Flex System Manager 1.2.1.0 IBM Flex System Manager 1.2.0.0 IBM Flex System Manager 1.1.0.0 IBM Aix 7.1.4 IBM Aix 7.1.3 IBM AIX 7.1.2 IBM AIX 7.1.1 IBM AIX 7.1 6 IBM AIX 7.1 IBM Aix 6.1.9 IBM AIX 6.1.8 IBM AIX 6.1.7 5 IBM AIX 6.1.7 IBM AIX 6.1.6 8 IBM AIX 6.1.6 IBM AIX 6.1.5 IBM AIX 6.1.4 IBM AIX 6.1.3 IBM AIX 6.1.2 IBM AIX 6.1.1 IBM Aix 7.1.4.1 IBM Aix 7.1.3.5 IBM Aix 7.1.2.6 IBM AIX 7.1.2.15 IBM AIX 7.1.1.5 IBM AIX 7.1.1.16 IBM AIX 7.1 IBM Aix 6.1.9.6 IBM Aix 6.1.9.5 IBM Aix 6.1.8.7 IBM Aix 6.1.8.6 IBM AIX 6.1.8.15 IBM AIX 6.1.7.16 IBM AIX 6.1 HP HP-UX B.11.31 Gentoo Linux FreeBSD FreeBSD 9.3 FreeBSD FreeBSD 9.2 FreeBSD FreeBSD 9.1 FreeBSD FreeBSD 9.0 FreeBSD FreeBSD 8.4 FreeBSD FreeBSD 8.3 FreeBSD FreeBSD 8.2 FreeBSD FreeBSD 8.1 FreeBSD FreeBSD 8.0 FreeBSD FreeBSD 7.4 FreeBSD FreeBSD 7.3 FreeBSD FreeBSD 10.1 FreeBSD Freebsd 10.0 Extremenetworks Summit WM3000 Series 0 Extremenetworks Purview 6.3.0.0 Extremenetworks NetSight 6.3.0.0 Extremenetworks NAC(IA) 6.3.0.0 Extremenetworks IDS/IPS 8.3.0.0 Extremenetworks IdentiFi Wireless 10.11 Extremenetworks ExtremeXOS 21.1 Extremenetworks ExtremeXOS 16.2 Extremenetworks ExtremeXOS 15.7 Extremenetworks ExtremeXOS 15.4.1.0 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Cisco Unified Computing System Central Software 1.1 Cisco Unified Computing System Central Software 1.0 Cisco Network Convergence System 6000 Series Routers 5.0.1 Cisco Network Convergence System 6000 Series Routers 5.0 Cisco IOS XR Software 0 Apple Mac OS X 10.10 Apple Mac OS X 10.9.5 Apple Mac OS X 10.8.5 Apple Mac Os X 10.10.3 Apple Mac OS X 10.10.2 Apple Mac OS X 10.10.1 Apple Mac OS X 10.10 |
| Not Vulnerable: |
Rockwell Automation Stratix 5900 15.6.3 Extremenetworks Purview 6.3.0.182 Extremenetworks NetSight 6.3.0.182 Extremenetworks NAC(IA) 6.3.0.182 Extremenetworks IDS/IPS 8.3.0.350 Extremenetworks IdentiFi Wireless 10.11.1 Extremenetworks ExtremeXOS 21.1.1 Extremenetworks ExtremeXOS 16.2.1 Extremenetworks ExtremeXOS 16.1.2 Extremenetworks ExtremeXOS 15.7.2 Extremenetworks ExtremeXOS 15.6.4 Apple Mac Os X 10.10.4 |
Discussion
NTP CVE-2015-1799 Denial of Service Vulnerability
NTP is prone to a denial-of-service vulnerability.
Successful exploits may allow the attacker to cause a denial-of-service condition.
NTP is prone to a denial-of-service vulnerability.
Successful exploits may allow the attacker to cause a denial-of-service condition.
Exploit / POC
NTP CVE-2015-1799 Denial of Service Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
NTP CVE-2015-1799 Denial of Service Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
NTP CVE-2015-1799 Denial of Service Vulnerability
References:
References:
- A vulnerability in NTPv3 affects AIX. (IBM)
- CVE-2015-1799 ntp: authentication doesn't protect symmetric associations against (Red Hat Bugzilla)
- Network Time Protocol Daemon Symmetric Mode Packet Processing Denial of Service (Cisco)
- Ntp Homepage (Dave Mills)
- [slackware-security] ntp (SSA:2015-111-08) (IBM)
- Advisory (ICSA-17-094-04)Rockwell Automation Stratix 5900 (CERT)
- HPSBUX03333 SSRT102029 rev.1 - HP-UX Running NTP, Remote Denial of Service (DoS) (HP)
- isg3T1022814: NTP vulnerabilities affect IBM SmartCloud Entry (CVE-2014-9297 CV (IBM)
- isg3T1022831 : Security Bulletin: A security vulnerability with ntpd affects IBM (IBM)
- Multiple Vulnerabilities in ntpd (April 2015) Affecting Cisco Products (Cisco)
- NTP Project ntpd reference implementation contains multiple vulnerabilities (US-CERT)
- ntp4_advisory.asc: IBM SECURITY ADVISORY (IBM)
- Ref: linuxbulletinoct2015-2719645 Oracle Linux Bulletin - October 2015 Revision (Oracle)
- swg21966578: Vulnerabilities in NTP affect IBM Security Network Protection (CVE (IBM)
- swg21966675: IBM Smart Analytics System 7600, 7700, 7710 and IBM PureData System (IBM)
- swg21967791: IBM Smart Analytics System 5600 is affected by multiple vulnerabili (IBM)
- swg21975967: IBM Security Access Manager for Mobile is affected by multiple NTP (IBM)
- swg2C1000111:Multiple vulnerabilities in Network Time Protocol affect IBM SmartC (IBM)
- VN 2015 006 Symmetric Key NTP (Extremenetwork)