Wind River Support Network


LIN8-2646 : Security Advisory - ntp - CVE-2015-7979

Created: Jan 29, 2016    Updated: Dec 3, 2018
Resolved Date: Mar 25, 2016
Found In Version: 8.0
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace


It was found that when NTP is configured in broadcast mode, an off-path attacker could broadcast packets with bad authentication (wrong key, mismatched key, incorrect MAC, etc) to all clients. The clients, upon receiving the malformed packets, would break the association with the broadcast server. This could cause the time on affected clients to become out of sync over a longer period of time.  

Other Downloads


Live chat