An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3.12 Ntp_advisory7 | — | — | Dec 19, 2016 | Dec 19, 2016 |
| Aix 6.1.6 Ntp_advisory7 | — | — | Nov 3, 2017 | Jan 6, 2017 |
| Aix 6.1.9 Ntp_advisory7 | — | — | Dec 19, 2016 | Dec 19, 2016 |
| Aix 7.1.0 Ntp_advisory7 | — | — | Nov 3, 2017 | Jan 6, 2017 |
| Aix 7.1.3 Ntp_advisory7 | — | — | Nov 3, 2017 | Jan 6, 2017 |
| Aix 7.1.4 Ntp_advisory7 | — | — | Dec 19, 2016 | Dec 19, 2016 |
| Aix 7.2.0 Ntp_advisory7 | — | — | Dec 19, 2016 | Dec 19, 2016 |
| Amazon_linux | — | Upgrade ntp | Jul 1, 2017 | Jun 2, 2016 |
| Centos_linux | — | Upgrade sntpUpgrade ntpUpgrade ntp-perlUpgrade ntpdateUpgrade ntp-doc | May 31, 2016 | May 31, 2016 |
| Cisco Apic | — | Upgrade to the latest version of Cisco APIC to resolve this vulnerability. | May 11, 2026 | Apr 28, 2016 |
| Debian | — | Upgrade ntp | Jul 27, 2016 | Jul 25, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 25, 2016 |
| Freebsd | — | Upgrade FreeBSDUpgrade ntp-develUpgrade ntp | Dec 10, 2025 | Apr 27, 2016 |
| Gentoo Linux | — | Upgrade net-misc/ntp. | Oct 30, 2017 | Jan 6, 2017 |
| Ibm Aix | — | Apply the fix or workaround for ntp_advisory7 | Nov 30, 2017 | Jan 6, 2017 |
| Ntp | — | Upgrade to the latest version of NTP | Feb 23, 2023 | Jan 6, 2017 |
| Oracle Solaris | — | Upgrade service/network/ntp to version 4.2.8.8-0.175.3.12.0.1.0 on Solaris 11.3 | May 29, 2017 | Jan 6, 2017 |
| Oracle_linux | — | Upgrade sntpUpgrade ntp-docUpgrade ntpdateUpgrade ntpUpgrade ntp-perl | Jan 6, 2017 | Jan 6, 2017 |
| Redhat_linux | — | Upgrade ntpUpgrade sntpUpgrade ntp-perlUpgrade ntpdateNo solution existsUpgrade ntp-docUpgrade ntp-debuginfo | Aug 3, 2016 | Aug 3, 2016 |
| Suse | — | Upgrade ntp-docUpgrade ntp | May 11, 2016 | May 11, 2016 |
| Ubuntu | — | Upgrade ntp | Oct 7, 2016 | Oct 5, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub