IBM Security Bulletin: Vulnerabilities in NTP affect AIX (CVE-2015-7974, CVE-2016-1550, CVE-2016-1551, CVE-2016-2517, CVE-2016-2518, CVE-2016-2519, CVE-2016-1547, CVE-2016-4957, CVE-2016-4953, CVE-2016-4954, CVE-2016-4955)
There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.
CVE(s):CVE-2015-7974, CVE-2016-1550, CVE-2016-1551, CVE-2016-2517, CVE-2016-2518, CVE-2016-2519, CVE-2016-1547, CVE-2016-4957, CVE-2016-4953, CVE-2016-4954, CVE-2016-4955
Affected product(s) and affected version(s):
AIX 5.3, 6.1, 7.1, 7.2
VIOS 2.2.x
The following fileset levels are vulnerable:
key_fileset = aix
For NTPv3:
Fileset Lower Level Upper Level KEY
-----------------------------------------------------
bos.net.tcp.client 5.3.12.0 5.3.12.10 key_w_fs
bos.net.tcp.client 6.1.9.0 6.1.9.102 key_w_fs
bos.net.tcp.client 7.1.3.0 7.1.3.47 key_w_fs
bos.net.tcp.client 7.1.4.0 7.1.4.1 key_w_fs
bos.net.tcp.ntp 7.2.0.0 7.2.0.2 key_w_fs
bos.net.tcp.ntpd 7.2.0.0 7.2.0.2 key_w_fs
For NTPv4:
Fileset Lower Level Upper Level KEY -----------------------------------------------------
ntp.rte 6.1.6.0 6.1.6.5 key_w_fs
ntp.rte 7.1.0.0 7.1.0.5 key_w_fs
Note: to find out whether the affected filesets are installed on your systems, refer to the lslpp command found in AIX user's guide.
Example: lslpp -L | grep -i ntp.rte
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://http://aix.software.ibm.com/aix/efixes/security/ntp_advisory7.asc
X-Force Database: http://ift.tt/29n0h9r
X-Force Database: http://ift.tt/2caszrD
X-Force Database: http://ift.tt/2bY9rjF
X-Force Database: http://ift.tt/2catDeM
X-Force Database: http://ift.tt/2bY9Wu7
X-Force Database: http://ift.tt/2cat70m
X-Force Database: http://ift.tt/2bY98FE
X-Force Database: http://ift.tt/2catBnd
X-Force Database: http://ift.tt/2bY9XhF
X-Force Database: http://ift.tt/2catyIc
X-Force Database: http://ift.tt/2bYa2Sa
from IBM Product Security Incident Response Team http://ift.tt/2catqZh