CVE-2016-9042
Quick assessment
Affected
Talos Network Time Protocol
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
NTP（Network Time Protocol，网络时间协议）是一款通过网络同步计算机时钟的协议。 NTP 4.2.8p9版本中的origin timestamp检测功能存在安全漏洞。攻击者可借助以认证的特制网络数据包利用该漏洞造成拒绝服务。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2016-9042
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
NTP 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NTP（Network Time Protocol，网络时间协议）是一款通过网络同步计算机时钟的协议。 NTP 4.2.8p9版本中的origin timestamp检测功能存在安全漏洞。攻击者可借助以认证的特制网络数据包利用该漏洞造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Talos | Network Time Protocol | NTP 4.2.8p9 | - |
|
II. Public POCs for CVE-2016-9042
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-9042
请登录查看更多情报信息。
Vendor Advisories for CVE-2016-9042 (11)
-
https://support.apple.com/kb/HT208144 x_refsource_CONFIRM
-
https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf x_refsource_CONFIRM
-
https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11 x_refsource_MISC
-
https://support.f5.com/csp/article/K39041624 x_refsource_CONFIRM
-
-
-
-
-
http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded mailing-list x_refsource_BUGTRAQ
-
http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded mailing-list x_refsource_BUGTRAQ
-
Exploits & Public PoCs for CVE-2016-9042 (1)
Mailing List Discussions for CVE-2016-9042 (3)
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/ vendor-advisory x_refsource_FEDORA
-
-
Other References for CVE-2016-9042 (5)
-
https://kc.mcafee.com/corporate/index?page=content&id=SB10201 x_refsource_CONFIRM
-
https://bto.bluecoat.com/security-advisory/sa147 x_refsource_CONFIRM
-
https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc vendor-advisory x_refsource_FREEBSD
Same Patch Batch · Talos · 2018-06-04 · 4 CVEs total
| CVE-2016-8390 | Hopper Dissassembler 缓冲区错误漏洞 | |
| CVE-2017-12092 | Rockwell Automation MicroLogix 1400 FRN和MicroLogix 1100 FRN 信息泄露漏洞 | |
| CVE-2018-3853 | Foxit Reader 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2016-9042
No comments yet