Wind River Support Network

HomeDefectsLIN8-3927
Fixed

LIN8-3927 : Security Advisory - ntp - CVE-2016-1547

Created: Jun 13, 2016    Updated: Dec 3, 2018
Resolved Date: Jun 19, 2016
Found In Version: 8.0
Fix Version: 8.0.0.7
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

An off-path attacker can cause a preemptable client association to be demobilized by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled. Furthermore, if the attacker keeps sending crypto NAK packets, for example every one second, the victim never has a chance to reestablish the association and synchronize time with the legitimate server.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1547 

Other Downloads


CVEs


Live chat
Online