Lucene search

K
redhatcveRedhat.comRH:CVE-2016-9311
HistoryNov 24, 2016 - 2:17 p.m.

CVE-2016-9311

2016-11-2414:17:32
redhat.com
access.redhat.com
14

0.022 Low

EPSS

Percentile

89.4%

A flaw was found in the way ntpd implemented the trap service. A remote attacker could send a specially crafted packet to cause a null pointer dereference that will crash ntpd, resulting in a denial of service.

Mitigation

Use "restrict default noquery …" in your ntp.conf file. Only allow mode 6 queries from trusted networks and hosts.