CVE-2016-1549

A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim's clock.

This release addresses five security issues in ntpd for Mageia 6:

LOW/MEDIUM: Sec 3012 / CVE-2016-1549 / VU#961909: Sybil vulnerability: ephemeral association attack While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11. Reported by Matt Van Gundy of Cisco.

INFO/MEDIUM: Sec 3412 / CVE-2018-7182 / VU#961909: ctl_getitem(): buffer read overrun leads to undefined behavior and information leak Reported by Yihan Lian of Qihoo 360.

LOW: Sec 3415 / CVE-2018-7170 / VU#961909: Multiple authenticated ephemeral associations. Reported on the questions@ list.

LOW: Sec 3453 / CVE-2018-7184 / VU#961909: Interleaved symmetric mode cannot recover from bad state. Reported by Miroslav Lichvar of Red Hat.

LOW/MEDIUM: Sec 3454 / CVE-2018-7185 / VU#961909: Unauthenticated packet can reset authenticated interleaved association. Reported by Miroslav Lichvar of Red Hat.

one security issue in ntpq: MEDIUM: Sec 3414 / CVE-2018-7183 / VU#961909: ntpq:decodearr() can write beyond its buffer limit. Reported by Michael Macnair of Thales-esecurity.com.

and provides over 33 bugfixes and 32 other improvements. ENotification of these issues were delivered to our Institutional members on a rolling basis as they were reported and as progress was made.

These are all security issues fixed in the ntp-4.2.8p9-1.1 package on the GA media of openSUSE Tumbleweed.

This update for ntp to 4.2.8p7 fixes the following issues:

• CVE-2016-1547, bsc#977459: Validate crypto-NAKs, AKA: CRYPTO-NAK DoS.
• CVE-2016-1548, bsc#977461: Interleave-pivot
• CVE-2016-1549, bsc#977451: Sybil vulnerability: ephemeral association attack.
• CVE-2016-1550, bsc#977464: Improve NTP security against buffer comparison timing attacks.
• CVE-2016-1551, bsc#977450: Refclock impersonation vulnerability
• CVE-2016-2516, bsc#977452: Duplicate IPs on unconfig directives will cause an assertion botch in ntpd.
• CVE-2016-2517, bsc#977455: remote configuration trustedkey/ requestkey/controlkey values are not properly validated.
• CVE-2016-2518, bsc#977457: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC.
• CVE-2016-2519, bsc#977458: ctl_getitem() return value not always checked.
• This update also improves the fixes for: CVE-2015-7704, CVE-2015-7705, CVE-2015-7974

Bugs fixed:

• Restrict the parser in the startup script to the first occurrance of 'keys' and 'controlkey' in ntp.conf (bsc#957226).

This update for ntp to 4.2.8p7 fixes the following issues:

• CVE-2016-1547, bsc#977459: Validate crypto-NAKs, AKA: CRYPTO-NAK DoS.
• CVE-2016-1548, bsc#977461: Interleave-pivot
• CVE-2016-1549, bsc#977451: Sybil vulnerability: ephemeral association attack.
• CVE-2016-1550, bsc#977464: Improve NTP security against buffer comparison timing attacks.
• CVE-2016-1551, bsc#977450: Refclock impersonation vulnerability
• CVE-2016-2516, bsc#977452: Duplicate IPs on unconfig directives will cause an assertion botch in ntpd.
• CVE-2016-2517, bsc#977455: remote configuration trustedkey/ requestkey/controlkey values are not properly validated.
• CVE-2016-2518, bsc#977457: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC.
• CVE-2016-2519, bsc#977458: ctl_getitem() return value not always checked.
• This update also improves the fixes for: CVE-2015-7704, CVE-2015-7705, CVE-2015-7974

Bugs fixed:

• Restrict the parser in the startup script to the first occurrance of 'keys' and 'controlkey' in ntp.conf (bsc#957226).

This update for ntp fixes the following issues:

• Separate the creation of ntp.keys and key #1 in it to avoid problems when upgrading installations that have the file, but no key #1, which is needed e.g. by 'rcntp addserver'.

• Update to 4.2.8p7 (bsc#977446):

  • CVE-2016-1547, bsc#977459: Validate crypto-NAKs, AKA: CRYPTO-NAK DoS.
  • CVE-2016-1548, bsc#977461: Interleave-pivot
  • CVE-2016-1549, bsc#977451: Sybil vulnerability: ephemeral association attack.
  • CVE-2016-1550, bsc#977464: Improve NTP security against buffer comparison timing attacks.
  • CVE-2016-1551, bsc#977450: Refclock impersonation vulnerability
  • CVE-2016-2516, bsc#977452: Duplicate IPs on unconfig directives will cause an assertion botch in ntpd.
  • CVE-2016-2517, bsc#977455: remote configuration trustedkey/ requestkey/controlkey values are not properly validated.
  • CVE-2016-2518, bsc#977457: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC.
  • CVE-2016-2519, bsc#977458: ctl_getitem() return value not always checked.
  • integrate ntp-fork.patch
  • Improve the fixes for: CVE-2015-7704, CVE-2015-7705, CVE-2015-7974

• Restrict the parser in the startup script to the first occurrance of 'keys' and 'controlkey' in ntp.conf (bsc#957226).

ntp was updated to version 4.2.8p8 to fix 17 security issues.

These security issues were fixed:

• CVE-2016-4956: Broadcast interleave (bsc#982068).
• CVE-2016-2518: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC (bsc#977457).
• CVE-2016-2519: ctl_getitem() return value not always checked (bsc#977458).
• CVE-2016-4954: Processing spoofed server packets (bsc#982066).
• CVE-2016-4955: Autokey association reset (bsc#982067).
• CVE-2015-7974: NTP did not verify peer associations of symmetric keys when authenticating packets, which might allowed remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a 'skeleton key (bsc#962960).
• CVE-2016-4957: CRYPTO_NAK crash (bsc#982064).
• CVE-2016-2516: Duplicate IPs on unconfig directives will cause an assertion botch (bsc#977452).
• CVE-2016-2517: Remote configuration trustedkey/requestkey values are not properly validated (bsc#977455).
• CVE-2016-4953: Bad authentication demobilizes ephemeral associations (bsc#982065).
• CVE-2016-1547: CRYPTO-NAK DoS (bsc#977459).
• CVE-2016-1551: Refclock impersonation vulnerability, AKA: refclock-peering (bsc#977450).
• CVE-2016-1550: Improve NTP security against buffer comparison timing attacks, authdecrypt-timing, AKA: authdecrypt-timing (bsc#977464).
• CVE-2016-1548: Interleave-pivot - MITIGATION ONLY (bsc#977461).
• CVE-2016-1549: Sybil vulnerability: ephemeral association attack, AKA: ntp-sybil - MITIGATION ONLY (bsc#977451).

This release also contained improved patches for CVE-2015-7704, CVE-2015-7705, CVE-2015-7974.

These non-security issues were fixed:

• bsc#979302: Change the process name of the forking DNS worker process to avoid the impression that ntpd is started twice.
• bsc#981422: Don't ignore SIGCHILD because it breaks wait().
• bsc#979981: ntp-wait does not accept fractional seconds, so use 1 instead of 0.2 in ntp-wait.service.
• Separate the creation of ntp.keys and key #1 in it to avoid problems when upgrading installations that have the file, but no key #1, which is needed e.g. by 'rcntp addserver'.
• bsc#957226: Restrict the parser in the startup script to the first occurrance of 'keys' and 'controlkey' in ntp.conf.

This update for ntp fixes the following issues:

Security issues fixed:

• CVE-2016-1549: Significant additional protections against CVE-2016-1549 that was fixed in ntp-4.2.8p7 (bsc#1082210).
• CVE-2018-7170: Ephemeral association time spoofing additional protection (bsc#1083424).
• CVE-2018-7182: Buffer read overrun leads information leak in ctl_getitem() (bsc#1083426).
• CVE-2018-7183: decodearr() can write beyond its buffer limit (bsc#1083417).
• CVE-2018-7184: Interleaved symmetric mode cannot recover from bad state (bsc#1083422).
• CVE-2018-7185: Unauthenticated packet can reset authenticated interleaved association (bsc#1083420).

Bug fixes:

• bsc#1077445: Don't use libevent's cached time stamps in sntp.
• Disable CMAC in ntp when building against a version of OpenSSL that doesn't support it.

This update for ntp fixes the following issues:

• Update to 4.2.8p11 (bsc#1082210):
  • CVE-2016-1549: Sybil vulnerability: ephemeral association attack. While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11.
  • CVE-2018-7182: ctl_getitem(): buffer read overrun leads to undefined behavior and information leak. (bsc#1083426)
  • CVE-2018-7170: Multiple authenticated ephemeral associations. (bsc#1083424)
  • CVE-2018-7184: Interleaved symmetric mode cannot recover from bad state. (bsc#1083422)
  • CVE-2018-7185: Unauthenticated packet can reset authenticated interleaved association. (bsc#1083420)
  • CVE-2018-7183: ntpq:decodearr() can write beyond its buffer limit.(bsc#1083417)
• Don't use libevent's cached time stamps in sntp. (bsc#1077445)

This update for ntp fixes the following issues:

• Update to 4.2.8p11 (bsc#1082210):
  • CVE-2016-1549: Sybil vulnerability: ephemeral association attack. While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11.
  • CVE-2018-7182: ctl_getitem(): buffer read overrun leads to undefined behavior and information leak. (bsc#1083426)
  • CVE-2018-7170: Multiple authenticated ephemeral associations. (bsc#1083424)
  • CVE-2018-7184: Interleaved symmetric mode cannot recover from bad state. (bsc#1083422)
  • CVE-2018-7185: Unauthenticated packet can reset authenticated interleaved association. (bsc#1083420)
  • CVE-2018-7183: ntpq:decodearr() can write beyond its buffer limit.(bsc#1083417)
• Don't use libevent's cached time stamps in sntp. (bsc#1077445)
• Fix systemd migration in %pre (bsc#1034892).

This update for ntp fixes the following issues:

• Update to 4.2.8p11 (bsc#1082210):
  • CVE-2016-1549: Sybil vulnerability: ephemeral association attack. While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11.
  • CVE-2018-7182: ctl_getitem(): buffer read overrun leads to undefined behavior and information leak. (bsc#1083426)
  • CVE-2018-7170: Multiple authenticated ephemeral associations. (bsc#1083424)
  • CVE-2018-7184: Interleaved symmetric mode cannot recover from bad state. (bsc#1083422)
  • CVE-2018-7185: Unauthenticated packet can reset authenticated interleaved association. (bsc#1083420)
  • CVE-2018-7183: ntpq:decodearr() can write beyond its buffer limit.(bsc#1083417)
• Don't use libevent's cached time stamps in sntp. (bsc#1077445)

This update is a reissue of the previous update with LTSS channels included.

This update for ntp fixes the following issues:

• Update to 4.2.8p11 (bsc#1082210):
  • CVE-2016-1549: Sybil vulnerability: ephemeral association attack. While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11.
  • CVE-2018-7182: ctl_getitem(): buffer read overrun leads to undefined behavior and information leak. (bsc#1083426)
  • CVE-2018-7170: Multiple authenticated ephemeral associations. (bsc#1083424)
  • CVE-2018-7184: Interleaved symmetric mode cannot recover from bad state. (bsc#1083422)
  • CVE-2018-7185: Unauthenticated packet can reset authenticated interleaved association. (bsc#1083420)
  • CVE-2018-7183: ntpq:decodearr() can write beyond its buffer limit.(bsc#1083417)
• Don't use libevent's cached time stamps in sntp. (bsc#1077445)

This update is a reissue of the previous update with LTSS channels included.