Deskripsi CVE

The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service (synchronization loss) by spoofing the source IP address of a peer.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-17	Category : DEPRECATED: Code This entry has been deprecated. It was originally used for organizing the Development View (CWE-699) and some other views, but it introduced unnecessary complexity and depth to the resulting tree.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	4.3		AV:A/AC:M/Au:N/C:N/I:P/A:P	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Ntp>>Ntp >> Version Hingga (termasuk) 4.2.7p444

Referensi

http://www.debian.org/security/2015/dsa-3222
Tags : vendor-advisory, x_refsource_DEBIAN

http://tools.cisco.com/security/center/viewAlert.x?alertId=38275
Tags : vendor-advisory, x_refsource_CISCO

http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html
Tags : mailing-list, x_refsource_MLIST

http://www.ubuntu.com/usn/USN-2567-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.kb.cert.org/vuls/id/374268
Tags : third-party-advisory, x_refsource_CERT-VN

http://www.securityfocus.com/bid/73950
Tags : vdb-entry, x_refsource_BID

http://marc.info/?l=bugtraq&m=143213867103400&w=2
Tags : vendor-advisory, x_refsource_HP

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html
Tags : vendor-advisory, x_refsource_FEDORA

http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
Tags : x_refsource_CONFIRM

https://kc.mcafee.com/corporate/index?page=content&id=SB10114
Tags : x_refsource_CONFIRM

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html
Tags : vendor-advisory, x_refsource_FEDORA

http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
Tags : vendor-advisory, x_refsource_APPLE

http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
Tags : x_refsource_CONFIRM

https://security.gentoo.org/glsa/201509-01
Tags : vendor-advisory, x_refsource_GENTOO

http://marc.info/?l=bugtraq&m=143213867103400&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.mandriva.com/security/advisories?name=MDVSA-2015:202
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
Tags : x_refsource_CONFIRM

http://support.apple.com/kb/HT204942
Tags : x_refsource_CONFIRM

http://marc.info/?l=bugtraq&m=145750740530849&w=2
Tags : vendor-advisory, x_refsource_HP

http://rhn.redhat.com/errata/RHSA-2015-1459.html
Tags : vendor-advisory, x_refsource_REDHAT

http://bugs.ntp.org/show_bug.cgi?id=2781
Tags : x_refsource_CONFIRM

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd
Tags : vendor-advisory, x_refsource_CISCO

http://www.debian.org/security/2015/dsa-3223
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.securitytracker.com/id/1032031
Tags : vdb-entry, x_refsource_SECTRACK

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	2.69%	–	–
2022-04-03	–	–	2.69%	–	–
2022-06-12	–	–	2.69%	–	–
2023-02-26	–	–	2.69%	–	–
2023-03-12	–	–	–	0.54%	–
2023-08-13	–	–	–	0.77%	–
2024-01-28	–	–	–	1.07%	–
2024-02-11	–	–	–	1.07%	–
2024-03-17	–	–	–	0.8%	–
2024-06-02	–	–	–	0.63%	–
2024-06-02	–	–	–	0.63%	–
2024-11-17	–	–	–	0.63%	–
2024-11-24	–	–	–	0.65%	–
2024-12-22	–	–	–	0.77%	–
2025-01-19	–	–	–	0.77%	–
2025-03-18	–	–	–	–	0.58%
2025-03-30	–	–	–	–	0.58%
2025-04-15	–	–	–	–	0.58%
2025-04-24	–	–	–	–	0.58%
2025-04-28	–	–	–	–	0.58%
2025-05-01	–	–	–	–	0.58%
2025-05-03	–	–	–	–	0.68%
2025-06-01	–	–	–	–	0.68%
2025-06-04	–	–	–	–	0.68%
2025-06-11	–	–	–	–	0.68%
2025-08-30	–	–	–	–	0.92%
2025-10-05	–	–	–	–	0.6%
2025-10-27	–	–	–	–	0.6%
2025-11-18	–	–	–	–	0.6%
2025-11-21	–	–	–	–	0.6%
2025-12-07	–	–	–	–	0.71%
2025-12-12	–	–	–	–	0.71%
2025-12-13	–	–	–	–	0.64%
2025-12-27	–	–	–	–	0.71%
2025-12-28	–	–	–	–	0.64%
2026-04-12	–	–	–	–	0.64%
2026-05-31	–	–	–	–	0.73%

Tanggal	Persentil
2022-02-06	63%
2022-04-03	81%
2022-06-12	82%
2023-02-26	83%
2023-03-12	74%
2023-08-13	79%
2024-01-28	83%
2024-02-11	84%
2024-03-17	81%
2024-06-02	79%
2024-06-02	79%
2024-11-17	8%
2024-11-24	8%
2024-12-22	81%
2025-01-19	81%
2025-03-18	67%
2025-03-30	66%
2025-04-15	67%
2025-04-24	68%
2025-04-28	67%
2025-05-01	68%
2025-05-03	7%
2025-06-01	71%
2025-06-04	7%
2025-06-11	71%
2025-08-30	75%
2025-10-05	68%
2025-10-27	69%
2025-11-18	67%
2025-11-21	69%
2025-12-07	71%
2025-12-12	72%
2025-12-13	7%
2025-12-27	72%
2025-12-28	7%
2026-04-12	71%
2026-05-31	73%

CVE-2015-1799 : Detail

CVE-2015-1799