CVEs-PoC/2016/CVE-2016-4956.md

### [CVE-2016-4956](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4956)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)

### Description

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.

### POC

#### Reference
- http://packetstormsecurity.com/files/137321/Slackware-Security-Advisory-ntp-Updates.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03757en_us

#### Github
No PoCs found on GitHub currently.