CVE-2016-1550: ntp project ntp

EPSS trend

Probability

3.60%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

-0.03 pp

From 3.63% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.60%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

40 links

www.ubuntu.com/usn/USN-3096-1Vendor AdvisoryX Refsource UBUNTU
www.debian.org/security/2016/dsa-3629Vendor AdvisoryX Refsource DEBIAN
www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlX Refsource CONFIRM
access.redhat.com/errata/RHSA-2016:1141Vendor AdvisoryX Refsource REDHAT
lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.htmlVendor AdvisoryX Refsource SUSE
www.kb.cert.org/vuls/id/718152Third Party AdvisoryX Refsource CERT VN
rhn.redhat.com/errata/RHSA-2016-1552.htmlVendor AdvisoryX Refsource REDHAT
www.securitytracker.com/id/1035705VDB EntryX Refsource SECTRACK
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlX Refsource CONFIRM
security.netapp.com/advisory/ntap-20171004-0002/X Refsource CONFIRM

Show all 40 references

www.talosintelligence.com/reports/TALOS-2016-0084/X Refsource MISCTechnical DescriptionThird Party Advisory
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpdVendor AdvisoryX Refsource CISCO
security.freebsd.org/advisories/FreeBSD-SA-16:16.ntp.ascVendor AdvisoryX Refsource FREEBSD
www.securityfocus.com/bid/88261VDB EntryX Refsource BID
lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-updates/2016-05/msg00114.htmlVendor AdvisoryX Refsource SUSE
security.gentoo.org/glsa/201607-15Vendor AdvisoryX Refsource GENTOO
lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.htmlVendor AdvisoryX Refsource SUSE
packetstormsecurity.com/files/136864/Slackware-Security-Advisory-ntp-Updates.htmlX Refsource MISC
lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.htmlVendor AdvisoryX Refsource SUSE
lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.htmlVendor AdvisoryX Refsource FEDORA
lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.htmlVendor AdvisoryX Refsource SUSE
www.debian.org/security/2016/dsa-3629Vendor AdvisoryX Refsource DEBIAN
www.talosintelligence.com/vulnerability_reports/TALOS-2016-0084X Refsource MISC
www.securityfocus.com/archive/1/538233/100/0/threadedMailing ListX Refsource BUGTRAQ
lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.htmlVendor AdvisoryX Refsource SUSE
www.securityfocus.com/archive/1/archive/1/538233/100/0/threadedMailing ListX Refsource BUGTRAQ
lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.htmlVendor AdvisoryX Refsource SUSE
lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.htmlVendor AdvisoryX Refsource FEDORA
cert-portal.siemens.com/productcert/pdf/ssa-497656.pdfX Refsource CONFIRM
us-cert.cisa.gov/ics/advisories/icsa-21-103-11X Refsource MISC
cert-portal.siemens.com/productcert/pdf/ssa-211752.pdfX Refsource CONFIRM
us-cert.cisa.gov/ics/advisories/icsa-21-159-11X Refsource MISC
www.arista.com/en/support/advisories-notices/security-advisories/1332-security-advisory-19X Refsource MISC
ubuntu.com/security/CVE-2016-1550REPORT
support.ntp.org/bin/view/Main/SecurityNoticeREPORT
www.talosintel.com/reports/TALOS-2016-0084/REPORT
ubuntu.com/security/notices/USN-3096-1Advisory
www.cve.org/CVERecord?id=CVE-2016-1550REPORT
security-tracker.debian.org/tracker/CVE-2016-1550Advisory

Related vulnerabilities

CVE-2013-5211debianntp+497.55%12y ago02-01-2014 11:00The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.CVE-2016-1549debianntp+43.12%9y ago06-01-2017 21:00A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim's clock.CVE-2016-1547debianntp+45.07%9y ago06-01-2017 21:00An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.CVE-2016-1548debianntp+43.81%9y ago06-01-2017 21:00An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched.CVE-2016-1551ntp projectntp+32.23%9y ago27-01-2017 17:00ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference clocks are treated like other peers and stored in the same structure, any packet with a source ip address of a reference clock (127.127.1.1 for example) that reaches the receive() function will match that reference clock's peer record and will be treated as a trusted peer. Any system that lacks the typical martian packet filtering which would block these packets is in danger of having its time controlled by an attacker.CVE-2014-5209debianntp+262.50%6y ago08-01-2020 00:29An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.

All vulnerabilities inntp ntp ntpsec

CVE-2016-1550: ntp project ntp

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References