CVE-2015-7974

Name of the Vulnerable Software and Affected Versions NTP versions 4.x before 4.2.8p6 NTP versions 4.3.x before 4.3.90

Description The issue allows remote attackers to conduct impersonation attacks via an arbitrary trusted key, also known as a "skeleton key", because peer associations of symmetric keys are not verified when authenticating packets.

Recommendations For NTP versions 4.x before 4.2.8p6, update to version 4.2.8p6 or later. For NTP versions 4.3.x before 4.3.90, update to version 4.3.90 or later.