April 2016 ntp-4.2.8p7 Security Vulnerability Announcement Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-16-035 Final 1 1 2017-04-03T00:00:00 Current version 2017-04-03T00:00:00 2017-04-03T00:00:00 ntp released an announcement on 26th April 2016, describing 4 low and 7 medium severity vulnerabilities, as listed below:- CVE-2016-1551- CVE-2016-1549- CVE-2016-2516- CVE-2016-2517- CVE-2016-2518- CVE-2016-2519- CVE-2016-1547- CVE-2016-1548- CVE-2015-7704- CVE-2015-8138- CVE-2015-1550 Information disclosure FortiOS versions 5.4.1, 5.4.0, 5.2.8 and below are vulnerable to only CVE-2016-1550. Upgrade to FortiOS version5.2.9 or above5.4.2 or aboveor 5.6.0 https://fortiguard.fortinet.com/psirt/FG-IR-16-035 April 2016 ntp-4.2.8p7 Security Vulnerability Announcement http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security AscenLink 7.2.13 AscenLink 7.2.12 AscenLink 7.2.11 AscenLink 7.2.10 AscenLink 7.2.9 AscenLink 7.2.8 AscenLink 7.2.7 AscenLink 7.2.6 AscenLink 7.2.5 AscenLink 7.2.4 AscenLink 7.2.3 AscenLink 7.2.2 AscenLink 7.2.1 AscenLink 7.2.0 FortiOS 5.4.1 FortiOS 5.4.0 FortiOS 5.2.8 FortiOS 5.2.7 FortiOS 5.2.6 FortiOS 5.2.5 FortiOS 5.2.4 FortiOS 5.2.3 FortiOS 5.2.2 FortiOS 5.2.1 FortiOS 5.2.0 FortiRecorder 2.3.0 FortiRecorder 2.2.2 FortiRecorder 2.2.1 FortiRecorder 2.2.0 FortiRecorder 2.1.1 FortiRecorder 2.1.0 FortiRecorder 2.0.0 FortiRecorder 1.4.1 FortiRecorder 1.4.0 FortiRecorder 1.3.1 FortiRecorder 1.3.0 FortiRecorder 1.2.0 FortiRecorder 1.1.0 FortiRecorder 1.0.0 FortiVoice 5.0.4 FortiVoice 5.0.3 FortiVoice 5.0.2 FortiVoice 5.0.1 FortiVoice 5.0.0 FortiVoice 4.0.2 FortiVoice 4.0.1 FortiVoice 4.0.0 FortiVoice 3.0.5 FortiVoice 3.0.3 FortiVoice 3.0.2 FortiVoice 3.0.1 FortiVoice 3.0.0 FortiVoice 2.2.1 FortiVoice 2.2.0 FortiVoice 2.1.0 FortiVoice 2.0.0 FortiWAN 4.2.2 FortiWAN 4.2.1 FortiWAN 4.1.3 FortiWAN 4.1.2 FortiWAN 4.1.1 FortiWAN 4.0.6 FortiWAN 4.0.5 FortiWAN 4.0.4 FortiWAN 4.0.3 FortiWAN 4.0.2 FortiWAN 4.0.1 FortiWAN 4.0.0 FortiWAN 0.4.23 FortiWAN 0.4.20 FortiWAN 0.4.10 FortiWAN-Manager 0.4.20 CVE-2015-7704 CVE-2015-8138 CVE-2016-1547 CVE-2016-1548 CVE-2016-1549 CVE-2016-1550 CVE-2016-1551 CVE-2016-2516 CVE-2016-2517 CVE-2016-2518 CVE-2016-2519 AscenLink-7.2.13 AscenLink-7.2.12 AscenLink-7.2.11 AscenLink-7.2.10 AscenLink-7.2.9 AscenLink-7.2.8 AscenLink-7.2.7 AscenLink-7.2.6 AscenLink-7.2.5 AscenLink-7.2.4 AscenLink-7.2.3 AscenLink-7.2.2 AscenLink-7.2.1 AscenLink-7.2.0 FortiOS-5.4.1 FortiOS-5.4.0 FortiOS-5.2.8 FortiOS-5.2.7 FortiOS-5.2.6 FortiOS-5.2.5 FortiOS-5.2.4 FortiOS-5.2.3 FortiOS-5.2.2 FortiOS-5.2.1 FortiOS-5.2.0 FortiRecorder-2.3.0 FortiRecorder-2.2.2 FortiRecorder-2.2.1 FortiRecorder-2.2.0 FortiRecorder-2.1.1 FortiRecorder-2.1.0 FortiRecorder-2.0.0 FortiRecorder-1.4.1 FortiRecorder-1.4.0 FortiRecorder-1.3.1 FortiRecorder-1.3.0 FortiRecorder-1.2.0 FortiRecorder-1.1.0 FortiRecorder-1.0.0 FortiVoice-5.0.4 FortiVoice-5.0.3 FortiVoice-5.0.2 FortiVoice-5.0.1 FortiVoice-5.0.0 FortiVoice-4.0.2 FortiVoice-4.0.1 FortiVoice-4.0.0 FortiVoice-3.0.5 FortiVoice-3.0.3 FortiVoice-3.0.2 FortiVoice-3.0.1 FortiVoice-3.0.0 FortiVoice-2.2.1 FortiVoice-2.2.0 FortiVoice-2.1.0 FortiVoice-2.0.0 FortiWAN-4.2.2 FortiWAN-4.2.1 FortiWAN-4.1.3 FortiWAN-4.1.2 FortiWAN-4.1.1 FortiWAN-4.0.6 FortiWAN-4.0.5 FortiWAN-4.0.4 FortiWAN-4.0.3 FortiWAN-4.0.2 FortiWAN-4.0.1 FortiWAN-4.0.0 FortiWAN-0.4.23 FortiWAN-0.4.20 FortiWAN-0.4.10 FortiWAN-Manager-0.4.20 0 https://fortiguard.fortinet.com/psirt/FG-IR-16-035 April 2016 ntp-4.2.8p7 Security Vulnerability Announcement Reference> http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security