CVE-2015-7973
Publication date 31 December 2015
Last updated 24 July 2024
Ubuntu priority
Cvss 3 Severity Score
NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.
Status
Package | Ubuntu Release | Status |
---|---|---|
ntp | ||
16.04 LTS xenial |
Fixed 1:4.2.8p4+dfsg-3ubuntu5.3
|
|
14.04 LTS trusty |
Fixed 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10
|
|
Notes
Severity score breakdown
Parameter | Value |
---|---|
Base score | 6.5 · Medium |
Attack vector | Network |
Attack complexity | High |
Privileges required | None |
User interaction | None |
Scope | Unchanged |
Confidentiality | None |
Integrity impact | Low |
Availability impact | High |
Vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H |
References
Related Ubuntu Security Notices (USN)
- USN-3096-1
- NTP vulnerabilities
- 5 October 2016