CVE-2015-7974
HighSummary
NTP versions 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, known as a 'skeleton key.'
Risk Assessment
Attackers may impersonate trusted sources, potentially leading to control over the system or network. This poses a serious threat to the integrity and confidentiality of data.
Recommendation
It is recommended to update NTP to version 4.2.8p6 or 4.3.90 and implement additional verification mechanisms for symmetric keys to protect against impersonation attacks.
Other vulnerabilities in NTP
See all- CVE-2015-5300High
The panic_gate check in NTP before version 4.2.8p5 is only re-enabled after the first change to the system clock greater than 128 milliseconds. This allows remote attackers to set NTP to an arbitrary time when started with the -g option or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources.
- CVE-2017-6455High
NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPI_DLLS environment variable.
- CVE-2016-7434High
The read_mru_list function in NTP before version 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.
Original NVD description (English source)
NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."