VULNERABILITY INTELLIGENCE

CVE-2016-4955

CVSS score5.9 MEDIUM

EPSS probability8.77%

CISA KEVNot currently listed

Published2016-07-05

Last modified2026-06-17

Description

ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.