CVE-2015-8139: Medium severity NTP ntp vulnerability
Published Jan 30, 2017
·Updated
ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors.
Affected Software
1 affected component
NTP ntp<=4.2.8
Event History
Jan 30, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2015-8139?
CVE-2015-8139 is considered a high-severity vulnerability as it allows remote attackers to exploit the NTP service.
2
How do I fix CVE-2015-8139?
To fix CVE-2015-8139, upgrade NTP to version 4.2.8p8 or later, which addresses this vulnerability.
3
What types of attacks can be performed using CVE-2015-8139?
Using CVE-2015-8139, attackers can obtain origin timestamps to impersonate legitimate NTP peers.
4
Which software versions are affected by CVE-2015-8139?
CVE-2015-8139 affects NTP versions prior to 4.2.8p7, including earlier versions.
5
Is there a workaround for CVE-2015-8139?
While upgrading is the best solution for CVE-2015-8139, temporarily restricting access to the NTP service can serve as a workaround.