CVE 2015-7871

Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.

Related bugs and status

CVE-2015-7871 (Candidate) is related to these bugs:

Bug #1479652: [patch] ntpd rejects source UDP ports less than 123 as bogus

		In	Importance	Status
1479652	[patch] ntpd rejects source UDP ports less than 123 as bogus	ntp (Ubuntu)	Medium	Fix Released
1479652	[patch] ntpd rejects source UDP ports less than 123 as bogus	NTP	High	Fix Released
1479652	[patch] ntpd rejects source UDP ports less than 123 as bogus	ntp (Debian)	Unknown	Fix Released
1479652	[patch] ntpd rejects source UDP ports less than 123 as bogus	ntp (Ubuntu Wily)	Medium	Fix Released
1479652	[patch] ntpd rejects source UDP ports less than 123 as bogus	ntp (Ubuntu Precise)	Medium	Fix Released
1479652	[patch] ntpd rejects source UDP ports less than 123 as bogus	ntp (Ubuntu Xenial)	Medium	Fix Released
1479652	[patch] ntpd rejects source UDP ports less than 123 as bogus	ntp (Ubuntu Trusty)	Medium	Fix Released

Bug #1512980: Please enable PPS in the Ubuntu build of ntpd

Summary				In	Importance	Status
	1512980	Please enable PPS in the Ubuntu build of ntpd		ntp (Ubuntu)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.