CVE-2016-1548: ntp project ntp Data Processing Errors
Vulnerability summary
CVE-2016-1548 is a high (CVSS 7.2) Data Processing Errors vulnerability in ntp project ntp. EPSS estimates a 3.81% chance of exploitation in the next 30 days, higher than 89.9% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 11 · Related 6Timeline
- 06-01-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.2HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
- OSV · DebianEcosystem advisory · calculated7.2HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
EPSS trend
Probability
3.81%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
-0.03 pp
From 3.84% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (talosintelligence.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian1 product
- ntp< 1:4.2.8p7+dfsg-1
Ntp1 product
- ntp4.2.8:p4
Ntp project1 product
- ntp4.2.8p4
Ntpsec project1 product
- ntpsecaa48d001683e5b791a743ec9c575aaf7d867a2b0c
Ubuntu1 product
- ntp< 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 | < 1:4.2.8p4+dfsg-3ubuntu5.3
5 vendors · 5 products
References
40 links
- www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlX Refsource CONFIRM
Show all 40 references
- www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRM
- security.netapp.com/advisory/ntap-20171004-0002/X Refsource CONFIRM
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpdVendor AdvisoryX Refsource CISCO
- www.talosintelligence.com/vulnerability_reports/TALOS-2016-0082X Refsource MISC
- lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.htmlVendor AdvisoryX Refsource FEDORA
- lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.htmlVendor AdvisoryX Refsource FEDORA
- cert-portal.siemens.com/productcert/pdf/ssa-497656.pdfX Refsource CONFIRM
us-cert.cisa.gov/ics/advisories/icsa-21-103-11X Refsource MISC- cert-portal.siemens.com/productcert/pdf/ssa-211752.pdfX Refsource CONFIRM
- us-cert.cisa.gov/ics/advisories/icsa-21-159-11X Refsource MISC