NVD Vulnerability Detail

CVE-2015-1799

Summary	The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service (synchronization loss) by spoofing the source IP address of a peer.
Publication Date	April 8, 2015, 7:59 p.m.
Registration Date	Jan. 26, 2021, 2:46 p.m.
Last Update	Nov. 21, 2024, 11:26 a.m.

CVSS2.0 : MEDIUM
Score	4.3
Vector	AV:A/AC:M/Au:N/C:N/I:P/A:P
攻撃元区分(AV)	隣接
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	低
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:ntp:ntp::::::::			4.2.7p444

Related information, measures and tools

No	URL	タグ
1	http://bugs.ntp.org/show_bug.cgi?id=2781
2	http://bugs.ntp.org/show_bug.cgi?id=2781
3	http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html
4	http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html
5	http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
6	http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
7	http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html
8	http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html
9	http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html
10	http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html
11	http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html
12	http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html
13	http://marc.info/?l=bugtraq&m=143213867103400&w=2
14	http://marc.info/?l=bugtraq&m=143213867103400&w=2
15	http://marc.info/?l=bugtraq&m=143213867103400&w=2
16	http://marc.info/?l=bugtraq&m=143213867103400&w=2
17	http://marc.info/?l=bugtraq&m=145750740530849&w=2
18	http://marc.info/?l=bugtraq&m=145750740530849&w=2
19	http://rhn.redhat.com/errata/RHSA-2015-1459.html
20	http://rhn.redhat.com/errata/RHSA-2015-1459.html
21	http://support.apple.com/kb/HT204942
22	http://support.apple.com/kb/HT204942
23	http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities	Vendor Advisory
24	http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities	Vendor Advisory
25	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd
26	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd
27	http://tools.cisco.com/security/center/viewAlert.x?alertId=38275
28	http://tools.cisco.com/security/center/viewAlert.x?alertId=38275
29	http://www.debian.org/security/2015/dsa-3222
30	http://www.debian.org/security/2015/dsa-3222
31	http://www.debian.org/security/2015/dsa-3223
32	http://www.debian.org/security/2015/dsa-3223
33	http://www.kb.cert.org/vuls/id/374268	Third Party Advisory US Government Resource
34	http://www.kb.cert.org/vuls/id/374268	Third Party Advisory US Government Resource
35	http://www.mandriva.com/security/advisories?name=MDVSA-2015:202
36	http://www.mandriva.com/security/advisories?name=MDVSA-2015:202
37	http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
38	http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
39	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
40	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
41	http://www.securityfocus.com/bid/73950
42	http://www.securityfocus.com/bid/73950
43	http://www.securitytracker.com/id/1032031
44	http://www.securitytracker.com/id/1032031
45	http://www.ubuntu.com/usn/USN-2567-1
46	http://www.ubuntu.com/usn/USN-2567-1
47	https://kc.mcafee.com/corporate/index?page=content&id=SB10114
48	https://kc.mcafee.com/corporate/index?page=content&id=SB10114
49	https://security.gentoo.org/glsa/201509-01
50	https://security.gentoo.org/glsa/201509-01

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-17	コード	https://cwe.mitre.org/data/definitions/17.html

JVN Vulnerability Information

NTP の ntpd の ntp_proto.c 内の receive の symmetric-key 機能におけるサービス運用妨害 (DoS) の脆弱性

Title	NTP の ntpd の ntp_proto.c 内の receive の symmetric-key 機能におけるサービス運用妨害 (DoS) の脆弱性
Summary	NTP の ntpd の ntp_proto.c 内の receive の symmetric-key 機能は、特定の不正なパケットを受信した場合においても、state variable の更新を実行するため、サービス運用妨害 (同期の失敗) 状態にされる脆弱性が存在します。補足情報 : CWE による脆弱性タイプは、CWE-17: Code (コード) と識別されています。 http://cwe.mitre.org/data/definitions/17.html
Possible impacts	中間者攻撃 (man-in-the-middle attack) により、ピアの送信元 IP アドレスになりすまされることで、サービス運用妨害 (同期の失敗) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	April 7, 2015, midnight
Registration Date	April 9, 2015, 12:32 p.m.
Last Update	July 14, 2015, 4:45 p.m.

Affected System

NTP Project

NTP 3.x

NTP 4.2.8p2 未満の 4.x

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-1799	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1799
National Vulnerability Database (NVD)
2	CVE-2015-1799	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1799

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-Other	https://www.ipa.go.jp/security/vuln/CWE.html#CWEOther

ベンダー情報

No	Name	URL
Apple Mailing Lists
1	APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005	http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
Apple Security Updates
2	HT204942	https://support.apple.com/en-us/HT204942
Apple セキュリティアップデート
3	HT204942	https://support.apple.com/ja-jp/HT204942
Cisco Security Advisory
4	cisco-sa-20150408-ntpd	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd
NTP Bugzilla
5	Bug 2781	http://bugs.ntp.org/show_bug.cgi?id=2781
Oracle Technology Network
6	Oracle Solaris Third Party Bulletin - April 2015	http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
Security Notice
7	Recent Vulnerabilities	http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
Vulnerability Alert
8	38275	http://tools.cisco.com/security/center/viewAlert.x?alertId=38275
シスコセキュリティアドバイザリ
9	cisco-sa-20150408-ntpd	http://www.cisco.com/cisco/web/support/JP/112/1128/1128965_cisco-sa-20150408-ntpd-j.html

その他

No	Name	URL
JVN
1	JVNVU#95993136	http://jvn.jp/vu/JVNVU95993136/index.html
US-CERT Vulnerability Note
2	VU#374268	http://www.kb.cert.org/vuls/id/374268

Change Log

No	Changed Details	Date of change
0	[2015年04月09日] 掲載 [2015年04月27日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：シスコシステムズ (38275) を追加ベンダ情報：シスコシステムズ (cisco-sa-20150408-ntpd) を追加 [2015年05月25日] ベンダ情報：オラクル (Oracle Solaris Third Party Bulletin - April 2015) を追加 [2015年07月14日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：アップル (HT204942) を追加ベンダ情報：アップル (APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005) を追加	Feb. 17, 2018, 10:37 a.m.