Wind River Support Network


LIN6-11437 : Security Advisory - ntp - CVE-2016-1547

Created: Jun 13, 2016    Updated: Dec 3, 2018
Resolved Date: Jun 16, 2016
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


An off-path attacker can cause a preemptable client association to be demobilized by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled. Furthermore, if the attacker keeps sending crypto NAK packets, for example every one second, the victim never has a chance to reestablish the association and synchronize time with the legitimate server. 

Other Downloads

Live chat