CVE-2016-1549

CVE-2016-1549 describes a vulnerability in NTP 4.2.8p4 and earlier, and specific NTPsec versions, where an authenticated attacker can manipulate the clock selection algorithm. By creating numerous ephemeral associations, a malicious peer can force a victim's NTP daemon to synchronize to an incorrect time source. This medium-severity vulnerability (CVSS 6.5) requires low privileges and network access, impacting the integrity of the affected system's clock. There is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, though it has received some community discussion and media coverage.