K05046514 : NTP vulnerability CVE-2015-7979

Security Advisory Description

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client. (CVE-2015-7979)
Impact
An attacker may exploit this vulnerability to send special crafted broadcast packets to broadcast clients. The clients, upon receiving the malformed packets, would break the association with the broadcast server. This may cause the affected network time protocol (NTP) clients to become out of synchronization over a longer period of time.
By default, the BIG-IP, BIG-IQ, and Enterprise Manager systems are not configured to accept broadcast NTP packets.