Security update for ntp SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:1568-1 Final 1 1 2016-06-14T06:45:46Z current 2016-06-14T06:45:46Z 2016-06-14T06:45:46Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ntp ntp was updated to version 4.2.8p8 to fix 17 security issues. These security issues were fixed: - CVE-2016-4956: Broadcast interleave (bsc#982068). - CVE-2016-2518: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC (bsc#977457). - CVE-2016-2519: ctl_getitem() return value not always checked (bsc#977458). - CVE-2016-4954: Processing spoofed server packets (bsc#982066). - CVE-2016-4955: Autokey association reset (bsc#982067). - CVE-2015-7974: NTP did not verify peer associations of symmetric keys when authenticating packets, which might allowed remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a 'skeleton key (bsc#962960). - CVE-2016-4957: CRYPTO_NAK crash (bsc#982064). - CVE-2016-2516: Duplicate IPs on unconfig directives will cause an assertion botch (bsc#977452). - CVE-2016-2517: Remote configuration trustedkey/requestkey values are not properly validated (bsc#977455). - CVE-2016-4953: Bad authentication demobilizes ephemeral associations (bsc#982065). - CVE-2016-1547: CRYPTO-NAK DoS (bsc#977459). - CVE-2016-1551: Refclock impersonation vulnerability, AKA: refclock-peering (bsc#977450). - CVE-2016-1550: Improve NTP security against buffer comparison timing attacks, authdecrypt-timing, AKA: authdecrypt-timing (bsc#977464). - CVE-2016-1548: Interleave-pivot - MITIGATION ONLY (bsc#977461). - CVE-2016-1549: Sybil vulnerability: ephemeral association attack, AKA: ntp-sybil - MITIGATION ONLY (bsc#977451). This release also contained improved patches for CVE-2015-7704, CVE-2015-7705, CVE-2015-7974. These non-security issues were fixed: - bsc#979302: Change the process name of the forking DNS worker process to avoid the impression that ntpd is started twice. - bsc#981422: Don't ignore SIGCHILD because it breaks wait(). - bsc#979981: ntp-wait does not accept fractional seconds, so use 1 instead of 0.2 in ntp-wait.service. - Separate the creation of ntp.keys and key #1 in it to avoid problems when upgrading installations that have the file, but no key #1, which is needed e.g. by 'rcntp addserver'. - bsc#957226: Restrict the parser in the startup script to the first occurrance of 'keys' and 'controlkey' in ntp.conf. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-2016-933,SUSE-SLE-SERVER-12-2016-933 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ Link for SUSE-SU-2016:1568-1 https://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html E-Mail link for SUSE-SU-2016:1568-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/957226 SUSE Bug 957226 https://bugzilla.suse.com/962960 SUSE Bug 962960 https://bugzilla.suse.com/977450 SUSE Bug 977450 https://bugzilla.suse.com/977451 SUSE Bug 977451 https://bugzilla.suse.com/977452 SUSE Bug 977452 https://bugzilla.suse.com/977455 SUSE Bug 977455 https://bugzilla.suse.com/977457 SUSE Bug 977457 https://bugzilla.suse.com/977458 SUSE Bug 977458 https://bugzilla.suse.com/977459 SUSE Bug 977459 https://bugzilla.suse.com/977461 SUSE Bug 977461 https://bugzilla.suse.com/977464 SUSE Bug 977464 https://bugzilla.suse.com/979302 SUSE Bug 979302 https://bugzilla.suse.com/979981 SUSE Bug 979981 https://bugzilla.suse.com/981422 SUSE Bug 981422 https://bugzilla.suse.com/982064 SUSE Bug 982064 https://bugzilla.suse.com/982065 SUSE Bug 982065 https://bugzilla.suse.com/982066 SUSE Bug 982066 https://bugzilla.suse.com/982067 SUSE Bug 982067 https://bugzilla.suse.com/982068 SUSE Bug 982068 https://www.suse.com/security/cve/CVE-2015-7704/ SUSE CVE CVE-2015-7704 page https://www.suse.com/security/cve/CVE-2015-7705/ SUSE CVE CVE-2015-7705 page https://www.suse.com/security/cve/CVE-2015-7974/ SUSE CVE CVE-2015-7974 page https://www.suse.com/security/cve/CVE-2016-1547/ SUSE CVE CVE-2016-1547 page https://www.suse.com/security/cve/CVE-2016-1548/ SUSE CVE CVE-2016-1548 page https://www.suse.com/security/cve/CVE-2016-1549/ SUSE CVE CVE-2016-1549 page https://www.suse.com/security/cve/CVE-2016-1550/ SUSE CVE CVE-2016-1550 page https://www.suse.com/security/cve/CVE-2016-1551/ SUSE CVE CVE-2016-1551 page https://www.suse.com/security/cve/CVE-2016-2516/ SUSE CVE CVE-2016-2516 page https://www.suse.com/security/cve/CVE-2016-2517/ SUSE CVE CVE-2016-2517 page https://www.suse.com/security/cve/CVE-2016-2518/ SUSE CVE CVE-2016-2518 page https://www.suse.com/security/cve/CVE-2016-2519/ SUSE CVE CVE-2016-2519 page https://www.suse.com/security/cve/CVE-2016-4953/ SUSE CVE CVE-2016-4953 page https://www.suse.com/security/cve/CVE-2016-4954/ SUSE CVE CVE-2016-4954 page https://www.suse.com/security/cve/CVE-2016-4955/ SUSE CVE CVE-2016-4955 page https://www.suse.com/security/cve/CVE-2016-4956/ SUSE CVE CVE-2016-4956 page https://www.suse.com/security/cve/CVE-2016-4957/ SUSE CVE CVE-2016-4957 page SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 ntp-4.2.8p8-46.8.1 ntp-doc-4.2.8p8-46.8.1 ntp-4.2.8p8-46.8.1 as a component of SUSE Linux Enterprise Desktop 12 ntp-doc-4.2.8p8-46.8.1 as a component of SUSE Linux Enterprise Desktop 12 ntp-4.2.8p8-46.8.1 as a component of SUSE Linux Enterprise Server 12 ntp-doc-4.2.8p8-46.8.1 as a component of SUSE Linux Enterprise Server 12 ntp-4.2.8p8-46.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 ntp-doc-4.2.8p8-46.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages. CVE-2015-7704 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2015-7704.html CVE-2015-7704 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/952611 SUSE Bug 952611 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/977446 SUSE Bug 977446 The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests. CVE-2015-7705 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2015-7705.html CVE-2015-7705 https://bugzilla.suse.com/1010964 SUSE Bug 1010964 https://bugzilla.suse.com/951608 SUSE Bug 951608 https://bugzilla.suse.com/952611 SUSE Bug 952611 https://bugzilla.suse.com/959243 SUSE Bug 959243 NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key." CVE-2015-7974 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 low 2.1 AV:N/AC:H/Au:S/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2015-7974.html CVE-2015-7974 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/962960 SUSE Bug 962960 https://bugzilla.suse.com/962995 SUSE Bug 962995 An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled. CVE-2016-1547 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2016-1547.html CVE-2016-1547 https://bugzilla.suse.com/962784 SUSE Bug 962784 https://bugzilla.suse.com/977446 SUSE Bug 977446 https://bugzilla.suse.com/977459 SUSE Bug 977459 https://bugzilla.suse.com/982064 SUSE Bug 982064 https://bugzilla.suse.com/982065 SUSE Bug 982065 An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched. CVE-2016-1548 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 moderate 6.4 AV:N/AC:L/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2016-1548.html CVE-2016-1548 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/977446 SUSE Bug 977446 https://bugzilla.suse.com/977461 SUSE Bug 977461 https://bugzilla.suse.com/982068 SUSE Bug 982068 A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim's clock. CVE-2016-1549 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 low 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2016-1549.html CVE-2016-1549 https://bugzilla.suse.com/1083424 SUSE Bug 1083424 https://bugzilla.suse.com/977446 SUSE Bug 977446 https://bugzilla.suse.com/977451 SUSE Bug 977451 An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key. CVE-2016-1550 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 low 2.6 AV:L/AC:H/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2016-1550.html CVE-2016-1550 https://bugzilla.suse.com/977446 SUSE Bug 977446 https://bugzilla.suse.com/977464 SUSE Bug 977464 ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference clocks are treated like other peers and stored in the same structure, any packet with a source ip address of a reference clock (127.127.1.1 for example) that reaches the receive() function will match that reference clock's peer record and will be treated as a trusted peer. Any system that lacks the typical martian packet filtering which would block these packets is in danger of having its time controlled by an attacker. CVE-2016-1551 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 low 2.6 AV:N/AC:H/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2016-1551.html CVE-2016-1551 https://bugzilla.suse.com/977446 SUSE Bug 977446 https://bugzilla.suse.com/977450 SUSE Bug 977450 NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service (ntpd abort) by using the same IP address multiple times in an unconfig directive. CVE-2016-2516 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 moderate 6.3 AV:N/AC:M/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2016-2516.html CVE-2016-2516 https://bugzilla.suse.com/977446 SUSE Bug 977446 https://bugzilla.suse.com/977452 SUSE Bug 977452 NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, controlkey, or requestkey. NOTE: this vulnerability exists because of a CVE-2016-2516 regression. CVE-2016-2517 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 moderate 4.9 AV:N/AC:H/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2016-2517.html CVE-2016-2517 https://bugzilla.suse.com/977446 SUSE Bug 977446 https://bugzilla.suse.com/977455 SUSE Bug 977455 The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value. CVE-2016-2518 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 low 2.1 AV:N/AC:H/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2016-2518.html CVE-2016-2518 https://bugzilla.suse.com/977446 SUSE Bug 977446 https://bugzilla.suse.com/977457 SUSE Bug 977457 ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value. CVE-2016-2519 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 moderate 4.9 AV:N/AC:H/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2016-2519.html CVE-2016-2519 https://bugzilla.suse.com/959243 SUSE Bug 959243 https://bugzilla.suse.com/977446 SUSE Bug 977446 https://bugzilla.suse.com/977458 SUSE Bug 977458 ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time. CVE-2016-4953 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 moderate 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2016-4953.html CVE-2016-4953 https://bugzilla.suse.com/962784 SUSE Bug 962784 https://bugzilla.suse.com/977459 SUSE Bug 977459 https://bugzilla.suse.com/982056 SUSE Bug 982056 https://bugzilla.suse.com/982065 SUSE Bug 982065 The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication. CVE-2016-4954 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 low 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2016-4954.html CVE-2016-4954 https://bugzilla.suse.com/982056 SUSE Bug 982056 https://bugzilla.suse.com/982066 SUSE Bug 982066 ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time. CVE-2016-4955 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 low 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2016-4955.html CVE-2016-4955 https://bugzilla.suse.com/982056 SUSE Bug 982056 https://bugzilla.suse.com/982067 SUSE Bug 982067 ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548. CVE-2016-4956 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 low 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2016-4956.html CVE-2016-4956 https://bugzilla.suse.com/977461 SUSE Bug 977461 https://bugzilla.suse.com/982056 SUSE Bug 982056 https://bugzilla.suse.com/982068 SUSE Bug 982068 ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547. CVE-2016-4957 SUSE Linux Enterprise Desktop 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Desktop 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server 12:ntp-doc-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-4.2.8p8-46.8.1 SUSE Linux Enterprise Server for SAP Applications 12:ntp-doc-4.2.8p8-46.8.1 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20161568-1/ https://www.suse.com/security/cve/CVE-2016-4957.html CVE-2016-4957 https://bugzilla.suse.com/977459 SUSE Bug 977459 https://bugzilla.suse.com/982056 SUSE Bug 982056 https://bugzilla.suse.com/982064 SUSE Bug 982064