CVE-2015-7974

NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote…

published January 26, 2016

CVSS
—
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05658 · 92.9th percentile
Published
2016-01-26T19:00Z
EPSS history
Timeline
  • 26 JAN 19:00Z
    NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote…
    cvelistv5