CVE-2015-1798
ntp - security update
EPSS 0.63%
Description
The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.
How to fix CVE-2015-1798
To remediate CVE-2015-1798, upgrade the affected package to a fixed version below.
- Debian/ntp—upgrade to 1:4.2.6.p5+dfsg-6 or later
- Debian/ntp—upgrade to 1:4.2.6.p2+dfsg-1+deb6u3 or later
- Debian/ntp—upgrade to 1:4.2.6.p5+dfsg-2+deb7u4 or later
Is CVE-2015-1798 being exploited?
Low — EPSS is 0.6%, meaning exploitation activity has not been observed at scale.
Affected packages (3)
- from 0, < 1:4.2.6.p5+dfsg-6
- from 0, < 1:4.2.6.p2+dfsg-1+deb6u3
- from 0, < 1:4.2.6.p5+dfsg-2+deb7u4