CVE-2016-9042
Estado: ModificadaMedia (5.9)—
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 5.9
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 3.91%
- Percentil entre todas las CVEs puntuadas: 90
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- CWE-20
Referencias
- http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html
- http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html
- http://seclists.org/fulldisclosure/2017/Nov/7
- http://seclists.org/fulldisclosure/2017/Sep/62
- http://www.securityfocus.com/archive/1/540403/100/0/threaded
- http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded
- http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded
- http://www.securityfocus.com/bid/97046
- http://www.securitytracker.com/id/1038123
- http://www.securitytracker.com/id/1039427
- http://www.ubuntu.com/usn/USN-3349-1
- https://bto.bluecoat.com/security-advisory/sa147
- https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf
- https://kc.mcafee.com/corporate/index?page=content&id=SB10201
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/
- https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc
- https://support.apple.com/kb/HT208144
- https://support.f5.com/csp/article/K39041624
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
- https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260
- http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html
- http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html
- http://seclists.org/fulldisclosure/2017/Nov/7
- http://seclists.org/fulldisclosure/2017/Sep/62
- http://www.securityfocus.com/archive/1/540403/100/0/threaded
- http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded
- http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded
- http://www.securityfocus.com/bid/97046
- http://www.securitytracker.com/id/1038123
- http://www.securitytracker.com/id/1039427
- http://www.ubuntu.com/usn/USN-3349-1
- https://bto.bluecoat.com/security-advisory/sa147
- https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf
- https://kc.mcafee.com/corporate/index?page=content&id=SB10201
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/
- https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc
- https://support.apple.com/kb/HT208144
- https://support.f5.com/csp/article/K39041624
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
- https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260
JSON original (NVD)
Mostrar
{
"id": "CVE-2016-9042",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "talos-cna@cisco.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 3.7,
"attackVector": "NETWORK",
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 1.4,
"exploitabilityScore": 2.2
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.9,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 2.2
}
]
},
"affected": [
{
"source": "talos-cna@cisco.com",
"affectedData": [
{
"vendor": "Talos",
"product": "Network Time Protocol",
"versions": [
{
"status": "affected",
"version": "NTP 4.2.8p9"
}
]
}
]
}
],
"published": "2018-06-04T20:29:00.417",
"references": [
{
"url": "http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html",
"source": "talos-cna@cisco.com"
},
{
"url": "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html",
"source": "talos-cna@cisco.com"
},
{
"url": "http://seclists.org/fulldisclosure/2017/Nov/7",
"source": "talos-cna@cisco.com"
},
{
"url": "http://seclists.org/fulldisclosure/2017/Sep/62",
"source": "talos-cna@cisco.com"
},
{
"url": "http://www.securityfocus.com/archive/1/540403/100/0/threaded",
"source": "talos-cna@cisco.com"
},
{
"url": "http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded",
"source": "talos-cna@cisco.com"
},
{
"url": "http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded",
"source": "talos-cna@cisco.com"
},
{
"url": "http://www.securityfocus.com/bid/97046",
"tags": [
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
],
"source": "talos-cna@cisco.com"
},
{
"url": "http://www.securitytracker.com/id/1038123",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "talos-cna@cisco.com"
},
{
"url": "http://www.securitytracker.com/id/1039427",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "talos-cna@cisco.com"
},
{
"url": "http://www.ubuntu.com/usn/USN-3349-1",
"source": "talos-cna@cisco.com"
},
{
"url": "https://bto.bluecoat.com/security-advisory/sa147",
"source": "talos-cna@cisco.com"
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
"tags": [
"Third Party Advisory"
],
"source": "talos-cna@cisco.com"
},
{
"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10201",
"source": "talos-cna@cisco.com"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/",
"source": "talos-cna@cisco.com"
},
{
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc",
"tags": [
"Third Party Advisory"
],
"source": "talos-cna@cisco.com"
},
{
"url": "https://support.apple.com/kb/HT208144",
"source": "talos-cna@cisco.com"
},
{
"url": "https://support.f5.com/csp/article/K39041624",
"source": "talos-cna@cisco.com"
},
{
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us",
"tags": [
"Third Party Advisory"
],
"source": "talos-cna@cisco.com"
},
{
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11",
"source": "talos-cna@cisco.com"
},
{
"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260",
"tags": [
"Exploit",
"Mitigation",
"Third Party Advisory"
],
"source": "talos-cna@cisco.com"
},
{
"url": "http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://seclists.org/fulldisclosure/2017/Nov/7",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://seclists.org/fulldisclosure/2017/Sep/62",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/540403/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/97046",
"tags": [
"Permissions Required",
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1038123",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1039427",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ubuntu.com/usn/USN-3349-1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bto.bluecoat.com/security-advisory/sa147",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10201",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://support.apple.com/kb/HT208144",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://support.f5.com/csp/article/K39041624",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260",
"tags": [
"Exploit",
"Mitigation",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition."
},
{
"lang": "es",
"value": "Existe una vulnerabilidad explotable de denegación de servicio (DoS) en la funcionalidad de comprobación de marca de tiempo de origen de ntpd 4.2.8p9. Se puede emplear un paquete de red no autenticado especialmente manipulado para reiniciar la marca de tiempo de origen esperada para los peers objetivo. Las respuestas legítimas de los peers objetivo no pasarán la comprobación de marca de tiempo de origen (TEST2), lo que hace que la respuesta se elimine y se cree una condición de denegación de servicio (DoS)."
}
],
"lastModified": "2026-06-17T00:55:20.353",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE002C76-406D-4F22-B738-E17BDEA70BCC"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:freebsd:freebsd:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA79CE41-D873-4A4A-A20C-83EB8772E5FA"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53E56F4F-B418-44DD-9C97-7276A4C58F3E"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1A1FDA7-BE46-4FAB-A3FD-9A40C770C4AB",
"versionEndExcluding": "c.4.2.8.4.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_net_cp_443-1_opc_ua_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22EFD09A-3D77-47B0-93FB-50F6C13A2F9A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_net_cp_443-1_opc_ua:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7F488810-73E3-4475-975A-C2FCA037E78B"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "talos-cna@cisco.com"
}