CVEs-PoC/2016/CVE-2016-7431.md

CVE-2016-7431

Description

NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.

POC

Reference

• http://packetstormsecurity.com/files/140240/FreeBSD-Security-Advisory-FreeBSD-SA-16.39.ntp.html
• http://packetstormsecurity.com/files/140240/FreeBSD-Security-Advisory-FreeBSD-SA-16.39.ntp.html
• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
• http://www.ubuntu.com/usn/USN-3349-1
• http://www.ubuntu.com/usn/USN-3349-1
• https://www.kb.cert.org/vuls/id/633847
• https://www.kb.cert.org/vuls/id/633847

Github

No PoCs found on GitHub currently.