CVE-2020-13817: High severity ibm security access manager vulnerability
NTP is vulnerable to a denial of service, caused by an issue when relying on unauthenticated IPv4 time sources in ntpd. By predicting transmit timestamps for use in spoofed packets, a remote attacker could exploit this vulnerability to cause the daemon to crash or system time change.
Other sources
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.
ntpd instance that gets its time from unauthenticated IPv4 time sources may be vulnerable to an off-path attacker who can query time from the victim's ntpd instance. After 8 or more successful attacks in a row, the attacker can either modify the victim's clock by a limited amount or cause ntpd to exit.
Upstream Reference:
http://support.ntp.org/bin/view/Main/NtpBug3596
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-13817?
CVE-2020-13817 has a severity rating categorized as high due to its potential to cause a denial of service.
How do I fix CVE-2020-13817?
To fix CVE-2020-13817, update to NTP versions 4.2.8 or 4.3.100 or later, which have patched the vulnerability.
Which systems are affected by CVE-2020-13817?
CVE-2020-13817 affects specific versions of NTP, including versions below 4.2.8 and between 4.3.0 and 4.3.100.
What is the exploit method for CVE-2020-13817?
The exploit method for CVE-2020-13817 involves remote attackers predicting transmit timestamps to send spoofed packets.
What impact does CVE-2020-13817 have on NTP services?
The impact of CVE-2020-13817 includes the potential crashing of the NTP daemon and alteration of system time.