Bug 982064 (CVE-2016-4957) - VUL-0: CVE-2016-4957: ntp: CRYPTO_NAK crash
Summary: VUL-0: CVE-2016-4957: ntp: CRYPTO_NAK crash
Status: RESOLVED FIXED
Alias: CVE-2016-4957
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Major
Target Milestone: ---
Deadline: 2016-06-21
Assignee: Security Team bot
QA Contact: Security Team bot
URL:
Whiteboard: CVSSv2:SUSE:CVE-2016-4957:5.0:(AV:N/A...
Keywords:
Depends on: 982056
Blocks:
  Show dependency treegraph
 
Reported: 2016-05-27 16:36 UTC by Alexander Bergmann
Modified: 2016-08-18 15:52 UTC (History)
4 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Comment 1 Swamp Workflow Management 2016-05-27 22:02:23 UTC
bugbot adjusting priority
Comment 2 Marcus Meissner 2016-05-28 11:38:32 UTC
CRD: 2016-06-02
Comment 3 Marcus Meissner 2016-06-03 01:14:44 UTC
http://support.ntp.org/bin/view/Main/NtpBug3046

 NTP Bug 3046
CRYPTO_NAK crash

    Date Resolved: 02 June 2016; Dev (4.3.93) 02 June 2016
    References: Sec 3046 / CVE-2016-4957 / VU#321640
    Affects: ntp-4.2.8p7, and ntp-4.3.92.
    CVSS2: HIGH 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)
    CVSS3: HIGH 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    Summary: The fix for Sec 3007 in ntp-4.2.8p7 contained a bug that could cause ntpd to crash.
    Mitigation:
        Implement BCP-38.
        Upgrade to 4.2.8p8, or later, from the NTP Project Download Page or the NTP Public Services Project Download Page
        If you cannot upgrade from 4.2.8p7, the only other alternatives are to patch your code or filter CRYPTO_NAK packets.
        Properly monitor your ntpd instances, and auto-restart ntpd (without -g) if it stops running. 
    Credit: This weakness was discovered by Nicolas Edet of Cisco.
Comment 5 Bernhard Wiedemann 2016-06-07 11:00:41 UTC
This is an autogenerated message for OBS integration:
This bug (982064) was mentioned in
https://build.opensuse.org/request/show/400418 13.2 / ntp
Comment 6 Bernhard Wiedemann 2016-06-07 14:01:34 UTC
This is an autogenerated message for OBS integration:
This bug (982064) was mentioned in
https://build.opensuse.org/request/show/400540 Factory / ntp
Comment 7 Xuanke Han 2016-06-12 06:00:46 UTC
Does this issue affect on sles10 sp4, sles11 sp2/sp4, sles12?
If affect, when the fix will be release?

Thanks,
Xuanke Han
Comment 8 Marcus Meissner 2016-06-13 11:36:24 UTC
They are all affected. SLES 11 and SLES 12 updates will be released in the next days. SLES 10 will take a bit longer.
Comment 9 Swamp Workflow Management 2016-06-13 16:38:36 UTC
SUSE-SU-2016:1563-1: An update that solves 5 vulnerabilities and has four fixes is now available.

Category: security (important)
Bug References: 979302,979981,981422,982056,982064,982065,982066,982067,982068
CVE References: CVE-2016-4953,CVE-2016-4954,CVE-2016-4955,CVE-2016-4956,CVE-2016-4957
Sources used:
SUSE Linux Enterprise Server 12-SP1 (src):    ntp-4.2.8p8-14.1
SUSE Linux Enterprise Desktop 12-SP1 (src):    ntp-4.2.8p8-14.1
Comment 10 Swamp Workflow Management 2016-06-14 10:11:13 UTC
SUSE-SU-2016:1568-1: An update that solves 17 vulnerabilities and has two fixes is now available.

Category: security (important)
Bug References: 957226,962960,977450,977451,977452,977455,977457,977458,977459,977461,977464,979302,979981,981422,982064,982065,982066,982067,982068
CVE References: CVE-2015-7704,CVE-2015-7705,CVE-2015-7974,CVE-2016-1547,CVE-2016-1548,CVE-2016-1549,CVE-2016-1550,CVE-2016-1551,CVE-2016-2516,CVE-2016-2517,CVE-2016-2518,CVE-2016-2519,CVE-2016-4953,CVE-2016-4954,CVE-2016-4955,CVE-2016-4956,CVE-2016-4957
Sources used:
SUSE Linux Enterprise Server 12 (src):    ntp-4.2.8p8-46.8.1
SUSE Linux Enterprise Desktop 12 (src):    ntp-4.2.8p8-46.8.1
Comment 11 Swamp Workflow Management 2016-06-14 15:33:52 UTC
An update workflow for this issue was started.
This issue was rated as important.
Please submit fixed packages until 2016-06-21.
When done, reassign the bug to security-team@suse.de.
https://swamp.suse.de/webswamp/wf/62822
Comment 12 Swamp Workflow Management 2016-06-15 09:09:21 UTC
openSUSE-SU-2016:1583-1: An update that solves 5 vulnerabilities and has four fixes is now available.

Category: security (important)
Bug References: 979302,979981,981422,982056,982064,982065,982066,982067,982068
CVE References: CVE-2016-4953,CVE-2016-4954,CVE-2016-4955,CVE-2016-4956,CVE-2016-4957
Sources used:
openSUSE 13.2 (src):    ntp-4.2.8p8-25.18.1
Comment 13 Swamp Workflow Management 2016-06-15 12:09:02 UTC
SUSE-SU-2016:1584-1: An update that solves 5 vulnerabilities and has three fixes is now available.

Category: security (important)
Bug References: 979302,981422,982056,982064,982065,982066,982067,982068
CVE References: CVE-2016-4953,CVE-2016-4954,CVE-2016-4955,CVE-2016-4956,CVE-2016-4957
Sources used:
SUSE Linux Enterprise Server 11-SP4 (src):    ntp-4.2.8p8-14.1
SUSE Linux Enterprise Debuginfo 11-SP4 (src):    ntp-4.2.8p8-14.1
Comment 14 Swamp Workflow Management 2016-06-17 12:09:22 UTC
SUSE-SU-2016:1602-1: An update that solves 5 vulnerabilities and has three fixes is now available.

Category: security (important)
Bug References: 979302,981422,982056,982064,982065,982066,982067,982068
CVE References: CVE-2016-4953,CVE-2016-4954,CVE-2016-4955,CVE-2016-4956,CVE-2016-4957
Sources used:
SUSE OpenStack Cloud 5 (src):    ntp-4.2.8p8-47.3
SUSE Manager Proxy 2.1 (src):    ntp-4.2.8p8-47.3
SUSE Manager 2.1 (src):    ntp-4.2.8p8-47.3
SUSE Linux Enterprise Server 11-SP3-LTSS (src):    ntp-4.2.8p8-47.3
SUSE Linux Enterprise Server 11-SP2-LTSS (src):    ntp-4.2.8p8-47.3
SUSE Linux Enterprise Debuginfo 11-SP3 (src):    ntp-4.2.8p8-47.3
SUSE Linux Enterprise Debuginfo 11-SP2 (src):    ntp-4.2.8p8-47.3
Comment 15 Swamp Workflow Management 2016-06-20 19:08:36 UTC
openSUSE-SU-2016:1636-1: An update that solves 5 vulnerabilities and has four fixes is now available.

Category: security (important)
Bug References: 979302,979981,981422,982056,982064,982065,982066,982067,982068
CVE References: CVE-2016-4953,CVE-2016-4954,CVE-2016-4955,CVE-2016-4956,CVE-2016-4957
Sources used:
openSUSE Leap 42.1 (src):    ntp-4.2.8p8-24.1
Comment 16 Swamp Workflow Management 2016-07-29 17:16:03 UTC
SUSE-SU-2016:1912-1: An update that solves 43 vulnerabilities and has 9 fixes is now available.

Category: security (important)
Bug References: 782060,784760,905885,910063,916617,920183,920238,920893,920895,920905,924202,926510,936327,943218,943221,944300,951351,951559,951629,952611,957226,962318,962784,962802,962960,962966,962970,962988,962995,963000,963002,975496,977450,977451,977452,977455,977457,977458,977459,977461,977464,979302,981422,982056,982064,982065,982066,982067,982068,988417,988558,988565
CVE References: CVE-2015-1798,CVE-2015-1799,CVE-2015-5194,CVE-2015-5300,CVE-2015-7691,CVE-2015-7692,CVE-2015-7701,CVE-2015-7702,CVE-2015-7703,CVE-2015-7704,CVE-2015-7705,CVE-2015-7848,CVE-2015-7849,CVE-2015-7850,CVE-2015-7851,CVE-2015-7852,CVE-2015-7853,CVE-2015-7854,CVE-2015-7855,CVE-2015-7871,CVE-2015-7973,CVE-2015-7974,CVE-2015-7975,CVE-2015-7976,CVE-2015-7977,CVE-2015-7978,CVE-2015-7979,CVE-2015-8138,CVE-2015-8158,CVE-2016-1547,CVE-2016-1548,CVE-2016-1549,CVE-2016-1550,CVE-2016-1551,CVE-2016-2516,CVE-2016-2517,CVE-2016-2518,CVE-2016-2519,CVE-2016-4953,CVE-2016-4954,CVE-2016-4955,CVE-2016-4956,CVE-2016-4957
Sources used:
SUSE Linux Enterprise Server 10 SP4 LTSS (src):    ntp-4.2.8p8-0.7.1
Comment 17 Marcus Meissner 2016-08-01 08:39:14 UTC
alkl released