VulnerabilityModified
CVE-2016-2518
The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
MEDIUM 5.3EPSS 15.1%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 15.1%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- EPSS
- 15.08% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-125
- Affected
- ntp/ntp · debian/debian linux · netapp/clustered data ontap · netapp/data ontap · netapp/oncommand balance · netapp/oncommand performance manager · netapp/oncommand unified manager for clustered data ontap · oracle/communications user data repository · oracle/linux · redhat/enterprise linux desktop · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server eus · redhat/enterprise linux server tus · redhat/enterprise linux workstation · freebsd/freebsd · siemens/simatic net cp 443-1 opc ua firmware
- Source
- cve@mitre.org
References
- http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html
- http://packetstormsecurity.com/files/136864/Slackware-Security-Advisory-ntp-Updates.html
- http://rhn.redhat.com/errata/RHSA-2016-1552.htmlBroken Link
- http://support.ntp.org/bin/view/Main/NtpBug3009Vendor Advisory
- http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_ntp_4_2_8p7_SecurityVendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd
- http://www.debian.org/security/2016/dsa-3629Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlPatch, Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlThird Party Advisory
- http://www.securityfocus.com/archive/1/538233/100/0/threaded
- http://www.securityfocus.com/archive/1/archive/1/538233/100/0/threaded
- http://www.securityfocus.com/bid/88226Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1035705Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-3096-1
- https://access.redhat.com/errata/RHSA-2016:1141Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdfThird Party Advisory
- https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.ascThird Party Advisory
- https://security.gentoo.org/glsa/201607-15Third Party Advisory
- https://security.netapp.com/advisory/ntap-20171004-0002/Third Party Advisory
- https://support.f5.com/csp/article/K20804323
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.