CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-4957

ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.629

EPSS Ranking 98.3%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2016-4957

Ntp » Ntp » Version: 4.2.8

cpe:2.3:a:ntp:ntp:4.2.8
Ntp » Ntp » Version: 4.3.92

cpe:2.3:a:ntp:ntp:4.3.92
Suse » Manager Proxy » Version: 2.1

cpe:2.3:a:suse:manager_proxy:2.1
Suse » Openstack Cloud » Version: 5

cpe:2.3:a:suse:openstack_cloud:5
Novell » Suse Manager » Version: 2.1

cpe:2.3:o:novell:suse_manager:2.1
Opensuse » Leap » Version: 42.1

cpe:2.3:o:opensuse:leap:42.1
Opensuse » Opensuse » Version: 13.2

cpe:2.3:o:opensuse:opensuse:13.2
Oracle » Solaris » Version: 10

cpe:2.3:o:oracle:solaris:10
Oracle » Solaris » Version: 11.3

cpe:2.3:o:oracle:solaris:11.3
Suse » Linux Enterprise Desktop » Version: 12

cpe:2.3:o:suse:linux_enterprise_desktop:12
Suse » Linux Enterprise Server » Version: 11

cpe:2.3:o:suse:linux_enterprise_server:11
Suse » Linux Enterprise Server » Version: 12

cpe:2.3:o:suse:linux_enterprise_server:12

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-4957

Products

Pricing

Contact Us