{"id":"CVE-2015-1798","aliases":["DEBIAN-CVE-2015-1798","DLA-192-1","DSA-3223-1","EUVD-2015-1923","GHSA-cx2f-jc4r-m5vp","MGASA-2015-0152","RHSA-2015:1459","RHSA-2015:2231","SUSE-SU-2015:0865-1","UBUNTU-CVE-2015-1798","USN-2567-1","openSUSE-SU-2024:10181-1"],"status":"published","title":"The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2...","description":"The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.","severity":{"version":"2.0","score":1.8,"vector":"AV:A/AC:H/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02243,"percentile":0.82972,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-17"],"published":"2015-04-08T00:00:00Z","modified":"2026-08-27T22:47:49Z","fixes":[{"ecosystem":"Debian:11","package":"ntp","fixed_in":["1:4.2.6.p5+dfsg-6"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"ntp","fixed_in":["1:4.2.6.p5+dfsg-3ubuntu2.14.04.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:11","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.6.p5+dfsg-6"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.6.p2+dfsg-1+deb6u3"}]}],"versions":["1:4.2.6.p2+dfsg-1"],"bundled":3},{"source":"osv","ecosystem":"Debian:7","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.6.p5+dfsg-2+deb7u4"}]}],"versions":["1:4.2.6.p5+dfsg-2","1:4.2.6.p5+dfsg-2+deb7u1","1:4.2.6.p5+dfsg-2+deb7u2","1:4.2.6.p5+dfsg-2+deb7u3"],"bundled":3},{"source":"osv","ecosystem":"Mageia:4","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6p5-15.5.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6p5-44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6p5-44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6p5-44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.6.p5+dfsg-3ubuntu2.14.04.3"}]}],"versions":["1:4.2.6.p5+dfsg-3ubuntu2","1:4.2.6.p5+dfsg-3ubuntu2.14.04.1","1:4.2.6.p5+dfsg-3ubuntu2.14.04.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.6.p5+dfsg-3ubuntu2.14.04.3"}]}],"versions":["1:4.2.6.p5+dfsg-3ubuntu2","1:4.2.6.p5+dfsg-3ubuntu2.14.04.1","1:4.2.6.p5+dfsg-3ubuntu2.14.04.2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p9-1.1"}]}],"bundled":60}],"products":[{"vendor":"ntp","product":"ntp"}],"references":[{"url":"http://www.securitytracker.com/id/1032032","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2567-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.kb.cert.org/vuls/id/374268","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=143213867103400\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10114","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201509-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=38276","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:202","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/73951","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://support.apple.com/kb/HT204942","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1459.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","web"]},{"url":"http://bugs.ntp.org/show_bug.cgi?id=2779","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2015/dsa-3223","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1798","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1459","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2231","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1199430","tags":["report"]},{"url":"https://github.com/advisories/GHSA-cx2f-jc4r-m5vp"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-1798","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0152.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15646","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=995134","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1045376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1117704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1122015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1165141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1166596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1171630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1184572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1184573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1190619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1193849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1193850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1199435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210324","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1459.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9297","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9297","tags":["advisory"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#vallen_is_not_validated_in_sever","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9298","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9298","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9298","tags":["advisory"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#1_can_be_spoofed_on_some_OSes_so","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9750","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9751","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9751","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1798","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1799","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1799","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1799","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3405","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3405","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3405","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1117702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1122012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1171640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1191108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1191122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1193154","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2231.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150865-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/918342","tags":["report"]},{"url":"https://bugzilla.suse.com/924202","tags":["report"]},{"url":"https://bugzilla.suse.com/928321","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3405","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-1798","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2567-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-1799","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9311","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-1798","description":"The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.","status":"published","published":"2015-04-08T10:00:00Z","modified":"2024-08-06T04:54:16.002Z","updated_at":"2026-11-02T14:35:44.404481Z"}],"euvd":[{"id":"EUVD-2015-1923","description":"The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.","status":"published","published":"2015-04-08T10:00:00Z","modified":"2024-08-06T04:54:16Z","updated_at":"2026-11-03T02:22:14.212001Z"}],"ghsa":[{"id":"GHSA-cx2f-jc4r-m5vp","title":"The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2...","description":"The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.","status":"published","published":"2022-05-14T03:59:23Z","modified":"2023-02-10T05:06:19Z","updated_at":"2026-11-02T14:54:01.286462Z"}],"nvd":[{"id":"CVE-2015-1798","description":"The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.","status":"published","published":"2015-04-08T10:59:04.61Z","modified":"2026-06-17T00:23:01.337Z","cvss":[{"version":"2.0","score":1.8,"vector":"AV:A/AC:H/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-17"],"updated_at":"2026-11-02T14:03:04.095849Z"}],"osv":[{"id":"CVE-2015-1798","description":"The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.","status":"published","published":"2015-04-08T10:59:04Z","modified":"2026-04-16T06:19:44.62085932Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-1798","description":"The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.","status":"published","published":"2015-04-08T10:59:04.61Z","modified":"2026-08-27T22:47:49.594974554Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"DLA-192-1","title":"ntp - security update","status":"published","published":"2015-04-10T00:00:00Z","modified":"2026-03-09T01:20:31.832966Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-3223-1","title":"ntp - security update","status":"published","published":"2015-04-12T00:00:00Z","modified":"2026-03-09T01:18:03.202937Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2015-0152","title":"Updated ntp packages fix security vulnerabilities","description":"Updated ntp packages fix security vulnerabilities:\n\nThe symmetric-key feature in the receive function in ntp_proto.c in ntpd in\nNTP before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero\nlength, which makes it easier for man-in-the-middle attackers to spoof packets\nby omitting the MAC (CVE-2015-1798).\n\nThe symmetric-key feature in the receive function in ntp_proto.c in ntpd in\nNTP before 4.2.8p2 performs state-variable updates upon receiving certain\ninvalid packets, which makes it easier for man-in-the-middle attackers to\ncause a denial of service (synchronization loss) by spoofing the source IP\naddress of a peer (CVE-2015-1799).\n","status":"published","published":"2015-04-15T09:01:28Z","modified":"2026-04-16T06:24:41.16979506Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10181-1","title":"ntp-4.2.8p9-1.1 on GA media","description":"These are all security issues fixed in the ntp-4.2.8p9-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:21:26.696395Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2015:1459","title":"Red Hat Security Advisory: ntp security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:22:21Z","modified":"2026-06-26T12:21:49.209989474Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:2231","title":"Red Hat Security Advisory: ntp security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:22:28Z","modified":"2026-06-26T12:21:50.046767614Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:0865-1","title":"Security update for ntp","description":"ntp was updated to fix two security related flaws as well as 'slew' mode handling for leap seconds. \n\nThe following vulnerabilities were fixe:\n\n* ntpd could accept unauthenticated packets with symmetric key crypto. (CVE-2015-1798)\n* ntpd authentication did not protect symmetric associations against DoS attacks (CVE-2015-1799)\n* ntp-keygen may generate non-random symmetric keys on big-endian systems (bsc#928321, CVE-2015-3405).\n\nThe following non-security issues were fixed:\n\n* Fix slew mode for leap seconds (bnc#918342).\n","status":"published","published":"2015-04-28T12:17:23Z","modified":"2026-02-04T02:31:52.175196Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2015-1798","description":"The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.","status":"published","published":"2015-04-08T00:00:00Z","modified":"2026-02-04T03:31:03.503739Z","updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"USN-2567-1","title":"ntp vulnerabilities","description":"Miroslav Lichvar discovered that NTP incorrectly validated MAC fields. A\nremote attacker could possibly use this issue to bypass authentication and\nspoof packets. (CVE-2015-1798)\n\nMiroslav Lichvar discovered that NTP incorrectly handled certain invalid\npackets. A remote attacker could possibly use this issue to cause a denial\nof service. (CVE-2015-1799)\n\nJuergen Perlinger discovered that NTP incorrectly generated MD5 keys on\nbig-endian platforms. This issue could either cause ntp-keygen to hang, or\ncould result in non-random keys. (CVE number pending)\n","status":"published","published":"2015-04-13T15:13:12Z","modified":"2026-02-10T04:40:53Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}