Vulnerability

NTP Daemon CRYPTO_NAK Denial Of Service Vulnerability (CVE-2016-4957)

Publish date: January 11, 2017

SEVERITY

HIGH


DESCRIPTION

A denial of service vulnerability exists in the Network Time Protocol daemon (NTPD). The vulnerability is due to a null pointer dereference when handling crypto-NAK packets. A remote attacker can exploit this vulnerability by sending an unsolicited crypto-NAK packet to the target service. Successful exploitation may result in denial-of-service conditions.

TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

SOLUTION

FILTER IDENTIFIER NUMBER: 1008086

Featured Stories

Connect with us on