rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-1466 
Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, and 11.5(1) allows remote attackers to cause a denial of service (sipd process restart) via crafted headers in a SIP packet, aka Bug ID CSCva39072.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-08T00:00:00.000Z
CVE-2016-1467 
Cisco Videoscape Session Resource Manager (VSRM) allows remote attackers to cause a denial of service (device restart) by sending a traffic flood to upstream devices, aka Bug ID CSCva01813.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-28T01:00:00.000Z
CVE-2016-1468 
The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug ID CSCuv12531.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-08T00:00:00.000Z
CVE-2016-1469 
The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service (device outage) via a series of malformed HTTP requests, aka Bug ID CSCut67385.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-12T01:00:00.000Z
CVE-2016-1470 
Cross-site request forgery (CSRF) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-02T00:00:00.000Z
CVE-2016-1471 
Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-02T00:00:00.000Z
CVE-2016-1472 
The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service (interface outage) via a crafted HTTP request, aka Bug ID CSCuz76238.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-02T00:00:00.000Z
CVE-2016-1473 
Cisco Small Business 220 devices with firmware before 1.0.1.1 have a hardcoded SNMP community, which allows remote attackers to read or modify SNMP objects by leveraging knowledge of this community, aka Bug ID CSCuz76216.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-02T00:00:00.000Z
CVE-2016-1474 
Cisco Prime Infrastructure 2.2(2) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCuw65846, a different vulnerability than CVE-2015-6434.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-08T00:00:00.000Z
CVE-2016-1476 
Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCuz03024.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-22T10:00:00.000Z
CVE-2016-1477 
Cisco Connected Streaming Analytics 1.1.1 allows remote authenticated users to discover a notification service password by reading administrative pages, aka Bug ID CSCuz92891.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-23T01:00:00.000Z
CVE-2016-1478 
Cisco IOS 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 does not properly dequeue invalid NTP packets, which allows remote attackers to cause a denial of service (interface wedge) by sending many crafted NTP packets, aka Bug ID CSCva35619.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-08T00:00:00.000Z
CVE-2016-1479 
Cisco IP Phone 8800 devices with software 11.0(1) allow remote attackers to cause a denial of service (memory corruption) via a crafted HTTP request, aka Bug ID CSCuz03038.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-22T10:00:00.000Z
CVE-2016-1480 
A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device. Affected Products: all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco ESA and Cisco WSA, both virtual and hardware appliances, if the software is configured with message or content filters to scan incoming email attachments. More Information: CSCuw03606, CSCux59734. Known Affected Releases: 8.0.0-000 8.5.6-106 9.0.0-000 9.1.0-032 9.6.0-042 9.5.0-444 WSA10.0.0-000. Known Fixed Releases: 9.1.1-038 9.7.1-066.
Problem types: description: unspecified
Affected products: vendor: n/a
product: Cisco AsyncOS through WSA10.0.0-000
Published: 2016-10-28T10:00:00.000Z
CVE-2016-1481 
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter that contains certain rules. More Information: CSCux59873. Known Affected Releases: 8.5.6-106 9.1.0-032 9.7.0-125. Known Fixed Releases: 9.1.1-038 9.7.1-066.
Problem types: description: unspecified
Affected products: vendor: n/a
product: Cisco AsyncOS through 9.7.0-125
Published: 2016-10-28T10:00:00.000Z
CVE-2016-1482 
Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into an application script, aka Bug ID CSCuy83130.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-17T21:00:00.000Z
CVE-2016-1483 
Cisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service (CPU consumption) by repeatedly accessing the account-validation component of an unspecified service, aka Bug ID CSCuy92704.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-19T01:00:00.000Z
CVE-2016-1484 
Cisco WebEx Meetings Server 2.6 allows remote attackers to bypass intended access restrictions and obtain sensitive application information via unspecified vectors, aka Bug ID CSCuy92724.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-23T01:00:00.000Z
CVE-2016-1485 
Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva46497.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-22T10:00:00.000Z
CVE-2016-1486 
A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages due to a denial of service (DoS) condition. Affected Products: This vulnerability affects Cisco AsyncOS Software releases 9.7.1 and later, prior to the first fixed release, for both virtual and hardware Cisco Email Security Appliances, if the AMP feature is configured to scan incoming email attachments. More Information: CSCuy99453. Known Affected Releases: 9.7.1-066. Known Fixed Releases: 10.0.0-125 9.7.1-207 9.7.2-047.
Problem types: description: unspecified
Affected products: vendor: n/a
product: Cisco AsyncOS through 9.7.1-066
Published: 2016-10-28T10:00:00.000Z
CVE-2016-1487 
Lexmark Markvision Enterprise before 2.3.0 misuses the Apache Commons Collections Library, leading to remote code execution because of Java deserialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-09T18:06:23.000Z
CVE-2016-1488 
Cross-site scripting (XSS) vulnerability in the login form in the integrated web server on Siemens OZW OZW672 devices before 6.00 and OZW772 devices before 6.00 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-30T11:00:00.000Z
CVE-2016-1489 
Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files in cleartext, which allows remote attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-26T19:00:00.000Z
CVE-2016-1490 
The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain sensitive file names via a crafted file request to /list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-26T19:00:00.000Z
CVE-2016-1491 
The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-26T19:00:00.000Z
CVE-2016-1492 
The Wifi hotspot in Lenovo SHAREit before 3.5.48_ww for Android, when configured to receive files, does not require a password, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-26T19:00:00.000Z
CVE-2016-1493 
Intel Driver Update Utility before 2.4 retrieves driver updates in cleartext, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-29T20:00:00.000Z
CVE-2016-1494 
The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-13T15:00:00.000Z
CVE-2016-1495 
Integer overflow in the graphics drivers in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-13T14:00:00.000Z
CVE-2016-1496 
The graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 allows attackers to cause a denial of service (system crash) via a crafted application, aka a "semaphore deadlock issue."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-13T14:00:00.000Z
CVE-2016-1497 
The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager (APM) access logs via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-26T14:00:00.000Z
CVE-2016-1498 
Cross-site scripting (XSS) vulnerability in the OCS discovery provider component in ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-08T21:00:00.000Z
CVE-2016-1499 
ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of service (CPU consumption) via the force parameter to index.php/apps/files/ajax/scan.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-08T21:00:00.000Z
CVE-2016-1500 
ownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2, when the "file_versions" application is enabled, does not properly check the return value of getOwner, which allows remote authenticated users to read the files with names starting with ".v" and belonging to a sharing user by leveraging an incoming share.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-08T21:00:00.000Z
CVE-2016-1501 
ownCloud Server before 8.0.9 and 8.1.x before 8.1.4 allow remote authenticated users to obtain sensitive information via unspecified vectors, which reveals the installation path in the resulting exception messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-08T21:00:00.000Z
CVE-2016-1502 
NetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication and then list and delete backups via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-07T17:00:00.000Z
CVE-2016-1503 
dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a malformed DHCP response, aka internal bug 26461634.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-18T00:00:00.000Z
CVE-2016-1504 
dhcpcd before 6.10.0 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to the option length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-07T15:00:00.000Z
CVE-2016-1505 
The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-03T15:00:00.000Z
CVE-2016-1513 
The Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read or write) or execute arbitrary code via crafted MetaActions in an (1) ODP or (2) OTP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-05T14:00:00.000Z
CVE-2016-1516 
OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code.
Problem types: description: double free
Affected products: vendor: n/a
product: OpenCV 3.0.0
Published: 2017-04-10T03:00:00.000Z
CVE-2016-1517 
OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks.
Problem types: description: DoS
Affected products: vendor: n/a
product: OpenCV 3.0.0
Published: 2017-04-10T03:00:00.000Z
CVE-2016-1518 
The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and consequently modify device functionality, obtain sensitive information from system logs, and have unspecified other impact by leveraging failure to use an HTTPS session for downloading configuration files from http://fm.grandstream.com/gs/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T20:00:00.000Z
CVE-2016-1519 
The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-the-middle attackers to spoof the Grandstream provisioning server via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T20:00:00.000Z
CVE-2016-1520 
The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-21T20:00:00.000Z
CVE-2016-1521 
The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-13T02:00:00.000Z
CVE-2016-1522 
Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-13T02:00:00.000Z
CVE-2016-1523 
The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-13T02:00:00.000Z
CVE-2016-1524 
Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2) lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for a /null URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-13T02:00:00.000Z
CVE-2016-1525 
Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a .. (dot dot) in the realName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-13T02:00:00.000Z
CVE-2016-1526 
The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, incorrectly validates a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-02-13T02:00:00.000Z
CVE-2016-1531 
Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-07T23:00:00.000Z
CVE-2016-1541 
Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-07T10:00:00.000Z
CVE-2016-1542 
The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T14:00:00.000Z
CVE-2016-1543 
The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T14:00:00.000Z
CVE-2016-1544 
nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).
Problem types: description: Other
Affected products: vendor: nghttp2
product: nghttp2
Published: 2020-02-06T14:20:29.000Z
CVE-2016-1546 
The Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which allows remote attackers to cause a denial of service (stream-processing outage) via modified flow-control windows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-06T14:00:00.000Z
CVE-2016-1547 
An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.
Problem types: description: unspecified
Affected products: vendor: NTP Project
product: NTP
vendor: NTPsec Project
product: NTPSec
Published: 2017-01-06T21:00:00.000Z
CVE-2016-1548 
An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched.
Problem types: description: unspecified
Affected products: vendor: NTP Project
product: NTP
vendor: NTPsec Project
product: NTPSec
Published: 2017-01-06T21:00:00.000Z
CVE-2016-1549 
A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim's clock.
Problem types: description: unspecified
Affected products: vendor: NTP Project
product: NTP
vendor: NTPsec Project
product: NTPSec
Published: 2017-01-06T21:00:00.000Z
CVE-2016-1550 
An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.
Problem types: description: unspecified
Affected products: vendor: NTP Project
product: NTP
vendor: NTPsec Project
product: NTPSec
Published: 2017-01-06T21:00:00.000Z