Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-7974
7.7
HIGHCVSS v3
Published
January 26, 2016
CVSS v2
4 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
ntp-project/ntp
GitHubThe full and complete NTP Reference Implementation from the Network Time Protocol Project at Network Time Foundation.
GitHubThe full and complete NTP Reference Implementation from the Network Time Protocol Project at Network Time Foundation.= 4.2.8, >= 4.2.0, < 4.2.8, >= 4.3.0, < 4.3.90NVD