Home > Vulnerability Database > CVE-2016-9042

Mend.io Vulnerability Database

CVE-2016-9042

Date: June 4, 2018

An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.

Severity Score

5.9

Related Resources (23)

Url: https://support.f5.com/csp/article/K39041624

Url: https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc

Url: https://kc.mcafee.com/corporate/index?page=content&id=SB10201

Url: http://seclists.org/fulldisclosure/2017/Sep/62

Url: https://support.apple.com/kb/HT208144

Url: http://seclists.org/fulldisclosure/2017/Nov/7

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/

Url: https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf

Url: http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html

Url: http://www.ubuntu.com/usn/USN-3349-1

Url: http://www.securityfocus.com/bid/97046

Url: https://nvd.nist.gov/vuln/detail/CVE-2016-9042

Url: http://www.securitytracker.com/id/1039427

Url: http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html

Url: http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded

Url: https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11

Url: http://www.securityfocus.com/archive/1/540403/100/0/threaded

Url: http://www.securitytracker.com/id/1038123

Url: http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded

Url: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us

Url: https://bto.bluecoat.com/security-advisory/sa147

Url: https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260

Url: https://www.mend.io/vulnerability-database/CVE-2016-9042

Severity Score

5.9

Weakness Type (CWE)

Input Validation

CWE-20

CVSS v3.1

Base Score:	5.9
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	HIGH

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2016-9042

Date: June 4, 2018

Severity Score

Related Resources (23)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?