CVE-2016-7433
mediumpriority · track · 24EPSS 0.098 · 96 %ileDEEUUSEPSS · scored 2026-10-23
NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- Fixedntp-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-10.el6_8.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-10.el6_8.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-10.el6_8.2.src as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-10.el6_8.2.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-10.el6_8.2.src as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-10.el6_8.2.src as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-25.el7_3.1.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-25.el7_3.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-25.el7_3.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-25.el7_3.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-25.el7_3.1.src as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-25.el7_3.1.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-25.el7_3.1.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-25.el7_3.1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-debuginfo-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-doc-0:4.2.6p5-10.el6_8.2.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-doc-0:4.2.6p5-10.el6_8.2.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-doc-0:4.2.6p5-10.el6_8.2.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-doc-0:4.2.6p5-10.el6_8.2.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-doc-0:4.2.6p5-25.el7_3.1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-doc-0:4.2.6p5-25.el7_3.1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-doc-0:4.2.6p5-25.el7_3.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-doc-0:4.2.6p5-25.el7_3.1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-perl-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-perl-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-perl-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-perl-0:4.2.6p5-10.el6_8.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-perl-0:4.2.6p5-10.el6_8.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-perl-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-perl-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-perl-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-perl-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-perl-0:4.2.6p5-25.el7_3.1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-perl-0:4.2.6p5-25.el7_3.1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-perl-0:4.2.6p5-25.el7_3.1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntp-perl-0:4.2.6p5-25.el7_3.1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-10.el6_8.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-10.el6_8.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-10.el6_8.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-10.el6_8.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-25.el7_3.1.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-25.el7_3.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-25.el7_3.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-25.el7_3.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedntpdate-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedsntp-0:4.2.6p5-25.el7_3.1.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedsntp-0:4.2.6p5-25.el7_3.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedsntp-0:4.2.6p5-25.el7_3.1.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedsntp-0:4.2.6p5-25.el7_3.1.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedsntp-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedsntp-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedsntp-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - Fixedsntp-0:4.2.6p5-25.el7_3.1.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the ntpd daemon will restart automatically.
https://access.redhat.com/errata/RHSA-2017:0252 - FixedSIMA² Master Stationauma_psirt
Upgrade your SIMA2 to software version 2.6 or above. The NTP service of the SIMA2 Master Station with software version V2.6 and above includes a current, supported version of ntpd.
- MitigationSIMATIC CP 443-1 OPC UAsiemens_psirt
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- MitigationSIMA² Master Stationauma_psirt
1. If your SIMA2 does not need to provide time information to other systems or synchronize itself with an NTP server, disable the NTP client on those systems. Please note that the NTP client is disabled by default in SIMA2 2. In case you must use the NTP server on an SIMA2, choose from the following options to reduce NTP-based risks: - Allow NTP traffic to/from trusted NTP clients only - Monitor the network for malicious NTP traffic going to/coming from the SIMA2 - Filter malicious NTP traffic going to/coming from the SIMA2 Monitor NTP server operations on your SIMA2 (server availability, correctness of advertised time, NTP-related log entries, etc.) 3. In case you must use the NTP client on an SIMA2, choose from the following options to reduce NTP-based risks: - Use trusted NTP servers only - Allow NTP traffic to/from trusted NTP servers only - Monitor the network for malicious NTP traffic targeting the SIMA2 - Filter malicious NTP traffic targeting the SIMA2 - Monitor NTP client operations on your SIMA2 (correctness of system time, NTP-related log entries, etc.)
- MitigationSIMATIC CP 443-1 OPC UAcisa_csaf_ot
Configure an additional firewall to prevent communication to port udp/123 of an affected device
- No fix plannedSIMATIC CP 443-1 OPC UAsiemens_psirt
Currently no remediation is planned
- No fix plannedSIMATIC CP 443-1 OPC UAcisa_csaf_ot
Currently no remediation is planned
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 1.2–5.3
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (113)
Products and version ranges known to be affected.
advisories (4)
Vendor and ecosystem advisories describing this.
- RHSA-2017:0252Red Hat Security Advisory: ntp security update2017-02-06csaf · redhat_csafUS
An update for ntp is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- SSA-211752SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA2021-06-08csaf · siemens_psirtDE
All versions of the SIMATIC CP 443-1 OPC UA contain multiple vulnerabilities in the underlying third party component NTP. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
- VDE-2022-032AUMA: Multiple Vulnerabilities in Automation Runtime NTP Service2022-08-09csaf · auma_psirtDE
The SIMA2 Master Station features an NTP service based on ntpd, a reference implementation of the Network Time Protocol (NTP). Affected SIMA2 Master Stations with software version < V2.6 include an outdated version of ntpd which is affected by a large number of vulnerabilities
- ICSA-21-159-11Siemens SIMATIC NET CP 443-1 OPC UA2021-06-08icsa · cisa_csaf_otUS
All versions of the SIMATIC CP 443-1 OPC UA contain multiple vulnerabilities in the underlying third party component NTP. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (64)
External citations — patches, advisories, analysis.
- http://nwtime.org/ntp428p9_release/cnnvd
- http://rhn.redhat.com/errata/RHSA-2017-0252.htmlcnnvd
- http://support.ntp.org/bin/view/Main/NtpBug3067cnnvd
- http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilitiescnnvd
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlcnnvd
- http://www.securitytracker.com/id/1037354cnnvd
- https://bto.bluecoat.com/security-advisory/sa139cnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdfcnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan