Wind River Support Network

HomeDefectsLIN8-3900
Fixed

LIN8-3900 : Security Advisory - ntp - CVE-2016-1549

Created: Jun 13, 2016    Updated: Dec 3, 2018
Resolved Date: Jun 19, 2016
Found In Version: 8.0
Fix Version: 8.0.0.7
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

ntpd can be vulnerable to Sybil attacks. If a system is set up to use a trustedkey and if one is not using the feature introduced in ntp-4.2.8p6 allowing an optional 4th field in the ntp.keys file to specify which IPs can serve time, a malicious authenticated peer -- i.e. one where the attacker knows the private symmetric key -- can create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1549 

Other Downloads


CVEs


Live chat
Online