critical
CVE-2015-7871
ntp: crypto-NAK symmetric association authentication bypass vulnerability
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.4AV:N/AC:L/Au:N/C:N/I:P/A:P
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (high), Amazon (high), Ubuntu (medium).
Description
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | ntp, ntp-debuginfo, ntp-doc and 2 more | 4.2.6p5-34.27.amzn1 |
| debian 11 | ntp | 1:4.2.8p4+dfsg-1 |
| debian 7 | ntp | 1:4.2.6.p5+dfsg-2+deb7u6 |
| debian 8 | ntp | 1:4.2.6.p5+dfsg-7+deb8u1 |
| ubuntu 12.04 | ntp | 1:4.2.6.p3+dfsg-1ubuntu3.6 |
| ubuntu 14.04 | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5 |
| ubuntu 14.04-ESM | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5 |
| ubuntu 15.04 | ntp | 1:4.2.6.p5+dfsg-3ubuntu6.2 |
| ubuntu 15.10 | ntp | 1:4.2.6.p5+dfsg-3ubuntu8.1 |
Show all 13 entries from 9 sources
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | ntp | 4.2.6p5-34.27.amzn1 |
| amazon linux 1 | ntp-debuginfo | 4.2.6p5-34.27.amzn1 |
| amazon linux 1 | ntp-doc | 4.2.6p5-34.27.amzn1 |
| amazon linux 1 | ntp-perl | 4.2.6p5-34.27.amzn1 |
| amazon linux 1 | ntpdate | 4.2.6p5-34.27.amzn1 |
| debian 11 | ntp | 1:4.2.8p4+dfsg-1 |
| debian 7 | ntp | 1:4.2.6.p5+dfsg-2+deb7u6 |
| debian 8 | ntp | 1:4.2.6.p5+dfsg-7+deb8u1 |
| ubuntu 12.04 | ntp | 1:4.2.6.p3+dfsg-1ubuntu3.6 |
| ubuntu 14.04 | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5 |
| ubuntu 14.04-ESM | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5 |
| ubuntu 15.04 | ntp | 1:4.2.6.p5+dfsg-3ubuntu6.2 |
| ubuntu 15.10 | ntp | 1:4.2.6.p5+dfsg-3ubuntu8.1 |
References
- http://blog.talosintel.com/2015/10/ntpd-vulnerabilities.html
- http://support.ntp.org/bin/view/Main/NtpBug2941
- http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_Security_Vulner
- http://talosintel.com/reports/TALOS-2015-0069/
- http://www.debian.org/security/2015/dsa-3388
- http://www.securityfocus.com/bid/77287
- http://www.securitytracker.com/id/1033951
- https://access.redhat.com/security/cve/CVE-2015-7871
All 17 references
- https://bugzilla.redhat.com/show_bug.cgi?id=1274265
- https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839
- https://nvd.nist.gov/vuln/detail/CVE-2015-7871
- https://security.gentoo.org/glsa/201604-03
- https://security.gentoo.org/glsa/201607-15
- https://security.netapp.com/advisory/ntap-20171004-0001/
- https://ubuntu.com/security/notices/USN-2783-1
- https://www.cve.org/CVERecord?id=CVE-2015-7871