Design/Logic Flaw

NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service ntpd abort by using the same IP address multiple times in an unconfig directive...

CVE-2016-2516: Improper Input Validation

NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service ntpd abort by using the same IP address multiple times in an unconfig directive...

Updated ntp packages fix security vulnerabilities

Updated ntp packages fix security vulnerabilities: It is possible to change the time of an ntpd client or deny service to an ntpd client by forcing it to change from basic client/server mode to interleaved symmetric mode. An attacker can spoof a packet from a legitimate ntpd server with an origin...

PT-2017-8051

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p7 NTP versions 4.3.x prior to 4.3.92 Description The issue allows remote attackers to cause a denial of service, resulting in ntpd abort. This is triggered by a large request data value, which causes the ctl getitem...