K41613034 : NTP vulnerability CVE-2016-2519

Security Advisory Description

ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value. (CVE-2016-2519)
Improper restriction of operations within the bounds of a network time protocol (NTP) memory buffer.
Impact
An NTP user with permission to store and retrieve data via ntpq/ntpdc can cause the** ntpd** process to exit.