Wind River Support Network

HomeDefectsLIN8-2601
Fixed

LIN8-2601 : Security Advisory - ntp - CVE-2015-7974

Created: Jan 28, 2016    Updated: Dec 3, 2018
Resolved Date: Mar 25, 2016
Found In Version: 8.0
Fix Version: 8.0.0.4
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a skeleton key.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-7974

Other Downloads


CVEs


Live chat
Online