Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.7
CVE-2016-7429: NTP can be stopped by crafted network reply
CVE-2016-7429 · published 9 years ago
Summary
Versions of NTP older than 4.2.8p9 may change how they track a remote server when a reply arrives from an unexpected network interface. An attacker who sends such a fake reply can disrupt the NTP service, preventing it from syncing time. Upgrade NTP to version 4.2.8p9 or later to prevent this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ntp | ntp |
<= 4.2.8 cpe:2.3:a:ntp:ntp:*:p8:*:*:*:*:*:* |
Original advisory text
NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a sourc...
NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a source) by sending a response for a source to an interface the source does not use.
References
- http://nwtime.org/ntp428p9_release/ Release Notes Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0252.html
- http://support.ntp.org/bin/view/Main/NtpBug3072 Issue Tracking Mitigation Vendor Advisory
- http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities Vendor Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.securityfocus.com/bid/94453
- http://www.securitytracker.com/id/1037354
- https://bto.bluecoat.com/security-advisory/sa139
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na...
- https://www.kb.cert.org/vuls/id/633847 Third Party Advisory US Government Resource
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-18DEPRECATED: Source Code
Timeline
Published13 Jan 2017
Updated17 Oct 2026
First seen29 Sep 2026
Sources
CVE-2016-7429 · NVD
Track software like this
Free during beta