HIGH✓ PATCH🇬🇧 English

CVE-2016-4954

CVSS 7.5v3.1pub. 2016-07-05upd. 2026-05-06

The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Ntp

    APP
    Ntp
    4.2.84.3.0 – 4.3.93 (bez)4.2.0 – 4.2.8 (bez)

  • Opensuse Leap

    OS
    Opensuse
    42.1

  • Opensuse

    OS
    Opensuse
    13.2

  • Oracle Solaris

    OS
    Oracle
    1011.3

  • Siemens Simatic Net Cp 443 1 Opc Ua

    HW
    Siemens
    wszystkie wersje

  • Siemens Simatic Net Cp 443 1 Opc Ua Firmware

    OS
    Siemens
    wszystkie wersje

  • Siemens Tim 4r Ie

    HW
    Siemens
    wszystkie wersje

  • Siemens Tim 4r Ie Dnp3

    HW
    Siemens
    wszystkie wersje

  • Siemens Tim 4r Ie Dnp3 Firmware

    OS
    Siemens
    wszystkie wersje

  • Siemens Tim 4r Ie Firmware

    OS
    Siemens
    wszystkie wersje

  • SUSE Linux Enterprise Desktop

    OS
    Suse
    12

  • SUSE Linux Enterprise Server

    OS
    Suse
    1112

  • SUSE Manager

    APP
    Suse
    2.1

  • SUSE Manager Proxy

    APP
    Suse
    2.1

  • SUSE Openstack Cloud

    APP
    Suse
    5
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2020-16846CRITICAL9.8⚠ KEVten sam produkt

An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the...

CVE-2020-14871CRITICAL10.0⚠ KEVten sam produkt

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Su...

CVE-2020-12641CRITICAL9.8⚠ KEVten sam produkt

rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacha...

CVE-2020-11651CRITICAL9.8⚠ KEVten sam produkt

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process Clea...

CVE-2016-4954 — HIGH 7.5 | CVEbaza.pl