Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-2517

NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, controlkey, or requestkey. NOTE: this vulnerability exists because of a CVE-2016-2516 regression.

Published

2017-01-30T21:59:01.033

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 5.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:H/Au:S/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: HIGH
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ntp ntp ≤ 4.2.8 Yes
Application ntp ntp 4.3.0 Yes
Application ntp ntp 4.3.1 Yes
Application ntp ntp 4.3.2 Yes
Application ntp ntp 4.3.3 Yes
Application ntp ntp 4.3.4 Yes
Application ntp ntp 4.3.5 Yes
Application ntp ntp 4.3.6 Yes
Application ntp ntp 4.3.7 Yes
Application ntp ntp 4.3.8 Yes
Application ntp ntp 4.3.9 Yes
Application ntp ntp 4.3.10 Yes
Application ntp ntp 4.3.11 Yes
Application ntp ntp 4.3.12 Yes
Application ntp ntp 4.3.13 Yes
Application ntp ntp 4.3.14 Yes
Application ntp ntp 4.3.15 Yes
Application ntp ntp 4.3.16 Yes
Application ntp ntp 4.3.17 Yes
Application ntp ntp 4.3.18 Yes
Application ntp ntp 4.3.19 Yes
Application ntp ntp 4.3.20 Yes
Application ntp ntp 4.3.21 Yes
Application ntp ntp 4.3.22 Yes
Application ntp ntp 4.3.23 Yes
Application ntp ntp 4.3.24 Yes
Application ntp ntp 4.3.25 Yes
Application ntp ntp 4.3.26 Yes
Application ntp ntp 4.3.27 Yes
Application ntp ntp 4.3.28 Yes
Application ntp ntp 4.3.29 Yes
Application ntp ntp 4.3.30 Yes
Application ntp ntp 4.3.31 Yes
Application ntp ntp 4.3.32 Yes
Application ntp ntp 4.3.33 Yes
Application ntp ntp 4.3.34 Yes
Application ntp ntp 4.3.35 Yes
Application ntp ntp 4.3.36 Yes
Application ntp ntp 4.3.37 Yes
Application ntp ntp 4.3.38 Yes
Application ntp ntp 4.3.39 Yes
Application ntp ntp 4.3.40 Yes
Application ntp ntp 4.3.41 Yes
Application ntp ntp 4.3.42 Yes
Application ntp ntp 4.3.43 Yes
Application ntp ntp 4.3.44 Yes
Application ntp ntp 4.3.45 Yes
Application ntp ntp 4.3.46 Yes
Application ntp ntp 4.3.47 Yes
Application ntp ntp 4.3.48 Yes
Application ntp ntp 4.3.49 Yes
Application ntp ntp 4.3.50 Yes
Application ntp ntp 4.3.51 Yes
Application ntp ntp 4.3.52 Yes
Application ntp ntp 4.3.53 Yes
Application ntp ntp 4.3.54 Yes
Application ntp ntp 4.3.55 Yes
Application ntp ntp 4.3.56 Yes
Application ntp ntp 4.3.57 Yes
Application ntp ntp 4.3.58 Yes
Application ntp ntp 4.3.59 Yes
Application ntp ntp 4.3.60 Yes
Application ntp ntp 4.3.61 Yes
Application ntp ntp 4.3.62 Yes
Application ntp ntp 4.3.63 Yes
Application ntp ntp 4.3.64 Yes
Application ntp ntp 4.3.65 Yes
Application ntp ntp 4.3.66 Yes
Application ntp ntp 4.3.67 Yes
Application ntp ntp 4.3.68 Yes
Application ntp ntp 4.3.69 Yes
Application ntp ntp 4.3.70 Yes
Application ntp ntp 4.3.71 Yes
Application ntp ntp 4.3.72 Yes
Application ntp ntp 4.3.73 Yes
Application ntp ntp 4.3.74 Yes
Application ntp ntp 4.3.75 Yes
Application ntp ntp 4.3.76 Yes
Application ntp ntp 4.3.77 Yes
Application ntp ntp 4.3.78 Yes
Application ntp ntp 4.3.79 Yes
Application ntp ntp 4.3.80 Yes
Application ntp ntp 4.3.81 Yes
Application ntp ntp 4.3.82 Yes
Application ntp ntp 4.3.83 Yes
Application ntp ntp 4.3.84 Yes
Application ntp ntp 4.3.85 Yes
Application ntp ntp 4.3.86 Yes
Application ntp ntp 4.3.87 Yes
Application ntp ntp 4.3.88 Yes
Application ntp ntp 4.3.89 Yes
Application ntp ntp 4.3.90 Yes
Application ntp ntp 4.3.91 Yes
References