CVE-2016-1549

Name of the Vulnerable Software and Affected Versions ntpd versions prior to 4.2.8p4 NTPsec versions prior to a5fb34b9cc89b92a8fef2f459004865c93bb7f92

Description A malicious authenticated peer can exploit an issue in the clock selection algorithm to modify a victim's clock. The issue is related to the handling of ephemeral associations, allowing an attacker to create multiple associations and influence the clock selection. This can potentially impact the integrity of data.

Recommendations For ntpd versions prior to 4.2.8p4, update to a version later than 4.2.8p4 to resolve the issue. For NTPsec versions prior to a5fb34b9cc89b92a8fef2f459004865c93bb7f92, update to a version later than a5fb34b9cc89b92a8fef2f459004865c93bb7f92 to resolve the issue.