CVE-2015-7871

Critical

Published: 07/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Crypto-NAK packets in ntpd in NTP versions 4.2.x before 4.2.8p4 and 4.3.x before 4.3.77 allow remote attackers to bypass authentication.

Bypassing authentication may lead to unauthorized access to NTP services, posing a risk of manipulation of system time within the organization.

It is recommended to upgrade to the latest version of NTP to mitigate this vulnerability.

Original NVD description (English source)

Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.