CVE-2016-4954

The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.

• Ntp

  APP
  Ntp
  4.2.84.3.0 – 4.3.93 (excl.)4.2.0 – 4.2.8 (excl.)

• Opensuse Leap

  OS
  Opensuse
  42.1

• Opensuse

  OS
  Opensuse
  13.2

• Oracle Solaris

  OS
  Oracle
  1011.3

• Siemens Simatic Net Cp 443 1 Opc Ua

  HW
  Siemens
  all versions

• Siemens Simatic Net Cp 443 1 Opc Ua Firmware

  OS
  Siemens
  all versions

• Siemens Tim 4r Ie

  HW
  Siemens
  all versions

• Siemens Tim 4r Ie Dnp3

  HW
  Siemens
  all versions

• Siemens Tim 4r Ie Dnp3 Firmware

  OS
  Siemens
  all versions

• Siemens Tim 4r Ie Firmware

  OS
  Siemens
  all versions

• SUSE Linux Enterprise Desktop

  OS
  Suse
  12

• SUSE Linux Enterprise Server

  OS
  Suse
  1112

• SUSE Manager

  APP
  Suse
  2.1

• SUSE Manager Proxy

  APP
  Suse
  2.1

• SUSE Openstack Cloud

  APP
  Suse
  5