CVE-2016-2518 : The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 a

The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.

Published 2017-01-30 21:59:01

Updated 2021-06-10 13:15:08

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2016-2518

Freebsd » Freebsd » Version: 9.3 Update P10
cpe:2.3:o:freebsd:freebsd:9.3:p10:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P12
cpe:2.3:o:freebsd:freebsd:9.3:p12:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P13
cpe:2.3:o:freebsd:freebsd:9.3:p13:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P16
cpe:2.3:o:freebsd:freebsd:9.3:p16:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P15
cpe:2.3:o:freebsd:freebsd:10.1:p15:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P16
cpe:2.3:o:freebsd:freebsd:10.1:p16:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P2
cpe:2.3:o:freebsd:freebsd:10.1:p2:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P3
cpe:2.3:o:freebsd:freebsd:10.1:p3:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3
cpe:2.3:o:freebsd:freebsd:9.3:-:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P2
cpe:2.3:o:freebsd:freebsd:9.3:p2:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P3
cpe:2.3:o:freebsd:freebsd:9.3:p3:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P1
cpe:2.3:o:freebsd:freebsd:10.1:p1:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P12
cpe:2.3:o:freebsd:freebsd:10.1:p12:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P4
cpe:2.3:o:freebsd:freebsd:10.1:p4:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P6
cpe:2.3:o:freebsd:freebsd:10.1:p6:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P6
cpe:2.3:o:freebsd:freebsd:9.3:p6:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P7
cpe:2.3:o:freebsd:freebsd:9.3:p7:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P8
cpe:2.3:o:freebsd:freebsd:9.3:p8:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P9
cpe:2.3:o:freebsd:freebsd:9.3:p9:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P8
cpe:2.3:o:freebsd:freebsd:10.1:p8:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P9
cpe:2.3:o:freebsd:freebsd:10.1:p9:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2
cpe:2.3:o:freebsd:freebsd:10.2:-:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P1
cpe:2.3:o:freebsd:freebsd:9.3:p1:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P19
cpe:2.3:o:freebsd:freebsd:9.3:p19:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P20
cpe:2.3:o:freebsd:freebsd:9.3:p20:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P5
cpe:2.3:o:freebsd:freebsd:9.3:p5:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1
cpe:2.3:o:freebsd:freebsd:10.1:-:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P10
cpe:2.3:o:freebsd:freebsd:10.1:p10:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P5
cpe:2.3:o:freebsd:freebsd:10.1:p5:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P7
cpe:2.3:o:freebsd:freebsd:10.1:p7:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P21
cpe:2.3:o:freebsd:freebsd:9.3:p21:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P22
cpe:2.3:o:freebsd:freebsd:9.3:p22:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P23
cpe:2.3:o:freebsd:freebsd:9.3:p23:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P24
cpe:2.3:o:freebsd:freebsd:9.3:p24:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P25
cpe:2.3:o:freebsd:freebsd:9.3:p25:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P17
cpe:2.3:o:freebsd:freebsd:10.1:p17:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P18
cpe:2.3:o:freebsd:freebsd:10.1:p18:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P19
cpe:2.3:o:freebsd:freebsd:10.1:p19:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P22
cpe:2.3:o:freebsd:freebsd:10.1:p22:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P24
cpe:2.3:o:freebsd:freebsd:10.1:p24:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P25
cpe:2.3:o:freebsd:freebsd:10.1:p25:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P26
cpe:2.3:o:freebsd:freebsd:10.1:p26:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P27
cpe:2.3:o:freebsd:freebsd:10.1:p27:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P1
cpe:2.3:o:freebsd:freebsd:10.2:p1:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P10
cpe:2.3:o:freebsd:freebsd:10.2:p10:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P2
cpe:2.3:o:freebsd:freebsd:10.2:p2:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P5
cpe:2.3:o:freebsd:freebsd:10.2:p5:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P7
cpe:2.3:o:freebsd:freebsd:10.2:p7:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P8
cpe:2.3:o:freebsd:freebsd:10.2:p8:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P9
cpe:2.3:o:freebsd:freebsd:10.2:p9:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P28
cpe:2.3:o:freebsd:freebsd:9.3:p28:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P30
cpe:2.3:o:freebsd:freebsd:9.3:p30:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P31
cpe:2.3:o:freebsd:freebsd:9.3:p31:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P32
cpe:2.3:o:freebsd:freebsd:9.3:p32:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P33
cpe:2.3:o:freebsd:freebsd:9.3:p33:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P34
cpe:2.3:o:freebsd:freebsd:9.3:p34:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P35
cpe:2.3:o:freebsd:freebsd:9.3:p35:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P36
cpe:2.3:o:freebsd:freebsd:9.3:p36:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P38
cpe:2.3:o:freebsd:freebsd:9.3:p38:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 9.3 Update P39
cpe:2.3:o:freebsd:freebsd:9.3:p39:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P11
cpe:2.3:o:freebsd:freebsd:10.2:p11:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P12
cpe:2.3:o:freebsd:freebsd:10.2:p12:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P13
cpe:2.3:o:freebsd:freebsd:10.2:p13:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.2 Update P14
cpe:2.3:o:freebsd:freebsd:10.2:p14:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.3
cpe:2.3:o:freebsd:freebsd:10.3:-:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P28
cpe:2.3:o:freebsd:freebsd:10.1:p28:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P29
cpe:2.3:o:freebsd:freebsd:10.1:p29:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P30
cpe:2.3:o:freebsd:freebsd:10.1:p30:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 10.1 Update P31
cpe:2.3:o:freebsd:freebsd:10.1:p31:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Desktop » Version: 7.0
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server » Version: 7.0
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Workstation » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Aus » Version: 7.4
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Aus » Version: 7.6
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Aus » Version: 7.2
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Eus » Version: 7.3
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Eus » Version: 7.4
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Eus » Version: 7.6
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Eus » Version: 7.7
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Eus » Version: 7.2
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Eus » Version: 7.5
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Tus » Version: 7.3
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Tus » Version: 7.6
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Tus » Version: 7.7
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Tus » Version: 7.2
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*
Matching versions
Oracle » Linux » Version: 6
cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*
Matching versions
Oracle » Linux » Version: 7
cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*
Matching versions
Oracle » Communications User Data Repository » Version: 10.0.1
cpe:2.3:a:oracle:communications_user_data_repository:10.0.1:*:*:*:*:*:*:*
Matching versions
Oracle » Communications User Data Repository » Version: 10.0.0
cpe:2.3:a:oracle:communications_user_data_repository:10.0.0:*:*:*:*:*:*:*
Matching versions
Oracle » Communications User Data Repository » Version: 12.0.0
cpe:2.3:a:oracle:communications_user_data_repository:12.0.0:*:*:*:*:*:*:*
Matching versions
Siemens » Simatic Net Cp 443-1 Opc Ua Firmware
cpe:2.3:o:siemens:simatic_net_cp_443-1_opc_ua_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Net Cp 443-1 Opc Ua » Version: N/A
NTP » NTP
Versions from including (>=) 4.3.0 and before (<) 4.3.92
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*
Matching versions
NTP » NTP
Versions before (<) 4.2.8
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8
cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2-rc1
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1
cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2
cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta1
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta2
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta3
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta4
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-beta5
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-rc1
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P1-rc2
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2-rc2
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P2-rc3
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3
cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3-rc1
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3-rc2
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P3-rc3
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P4
cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P5
cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P6
cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P7
cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*
Matching versions
NTP » NTP » Version: 4.2.8 Update P8
cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:*
Matching versions
Netapp » Oncommand Balance » Version: N/A
cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap » Version: N/A
cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
Matching versions
Netapp » Oncommand Unified Manager For Clustered Data Ontap » Version: N/A
cpe:2.3:a:netapp:oncommand_unified_manager_for_clustered_data_ontap:-:*:*:*:*:*:*:*
Matching versions
Netapp » Data Ontap » Version: N/A For 7-mode
cpe:2.3:a:netapp:data_ontap:-:*:*:*:*:7-mode:*:*
Matching versions
Netapp » Oncommand Performance Manager » Version: N/A
cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2016-2518

EPSS FAQ

0.79%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 73 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-2518

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low

CWE ids for CVE-2016-2518

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-2518

http://packetstormsecurity.com/files/136864/Slackware-Security-Advisory-ntp-Updates.html

Slackware Security Advisory - ntp Updates ≈ Packet Storm

CVEs referencing this url
http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_ntp_4_2_8p7_Security

SecurityNotice < Main < NTP
Vendor Advisory
https://security.netapp.com/advisory/ntap-20171004-0002/

April 2016 Network Time Protocol Daemon (ntpd) Vulnerabilities in Multiple NetApp Products | NetApp Product Security
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html

[security-announce] SUSE-SU-2016:1471-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists

CVEs referencing this url
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd

Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: April 2016

CVEs referencing this url
http://support.ntp.org/bin/view/Main/NtpBug3009

NtpBug3009 < Main < NTP
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2016-1552.html

RHSA-2016:1552 - Security Advisory - Red Hat Customer Portal
Broken Link

CVEs referencing this url
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Oracle Critical Patch Update - January 2018
Patch;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html

[security-announce] openSUSE-SU-2016:1329-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists

CVEs referencing this url
https://security.gentoo.org/glsa/201607-15

NTP: Multiple vulnerabilities (GLSA 201607-15) — Gentoo security
Third Party Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Oracle Solaris Bulletin - April 2016
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html

[security-announce] SUSE-SU-2016:1278-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists

CVEs referencing this url
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.html

[SECURITY] Fedora 24 Update: ntp-4.2.6p5-40.fc24

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html

[security-announce] SUSE-SU-2016:1568-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html

[security-announce] SUSE-SU-2016:1291-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2016:1141

RHSA-2016:1141 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Oracle Linux Bulletin - April 2016
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html

[security-announce] SUSE-SU-2016:1912-1: important: Security update for

CVEs referencing this url
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc

Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html

[security-announce] SUSE-SU-2016:2094-1: important: Security update for

CVEs referencing this url
https://www.debian.org/security/2016/dsa-3629

Debian -- Security Information -- DSA-3629-1 ntp

CVEs referencing this url
http://www.securityfocus.com/bid/88226

NTP CVE-2016-2518 Denial of Service Vulnerability
Third Party Advisory;VDB Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf

Third Party Advisory

CVEs referencing this url
https://support.f5.com/csp/article/K20804323

NTP vulnerability CVE-2016-2518
http://www.securityfocus.com/archive/1/archive/1/538233/100/0/threaded

SecurityFocus

CVEs referencing this url
https://www.kb.cert.org/vuls/id/718152

VU#718152 - NTP.org ntpd contains multiple vulnerabilities
Third Party Advisory;US Government Resource

CVEs referencing this url
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html

[SECURITY] Fedora 23 Update: ntp-4.2.6p5-40.fc23

CVEs referencing this url
http://www.ubuntu.com/usn/USN-3096-1

USN-3096-1: NTP vulnerabilities | Ubuntu security notices

CVEs referencing this url
http://www.securitytracker.com/id/1035705

ntp Multiple Bugs Let Remote Users Spoof Messages, Obtain Potentially Sensitive Information, Modify Time, and Deny Service - SecurityTracker
Third Party Advisory;VDB Entry

CVEs referencing this url
http://www.securityfocus.com/archive/1/538233/100/0/threaded

SecurityFocus

CVEs referencing this url
http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html

openSUSE-SU-2016:1423-1: moderate: Security update for ntp

CVEs referencing this url
https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11

Siemens SIMATIC NET CP 443-1 OPC UA | CISA

CVEs referencing this url
http://www.debian.org/security/2016/dsa-3629

Debian -- Security Information -- DSA-3629-1 ntp
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2016-2518

Products affected by CVE-2016-2518

Exploit prediction scoring system (EPSS) score for CVE-2016-2518

CVSS scores for CVE-2016-2518

CWE ids for CVE-2016-2518

References for CVE-2016-2518