Wind River Support Network

HomeDefectsLIN5-21679
Fixed

LIN5-21679 : Security Advisory - ntp - CVE-2016-1547

Created: Jun 13, 2016    Updated: May 29, 2018
Resolved Date: Jun 16, 2016
Found In Version: 5.0.1.35
Fix Version: 5.0.1.36
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

An off-path attacker can cause a preemptable client association to be demobilized by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled. Furthermore, if the attacker keeps sending crypto NAK packets, for example every one second, the victim never has a chance to reestablish the association and synchronize time with the legitimate server.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1547 

Other Downloads


Live chat
Online