Lucene search

K
ubuntucveUbuntu.comUB:CVE-2016-2519
HistoryJan 30, 2017 - 12:00 a.m.

CVE-2016-2519

2017-01-3000:00:00
ubuntu.com
ubuntu.com
4

0.046 Low

EPSS

Percentile

92.5%

ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers
to cause a denial of service (ntpd abort) by a large request data value,
which triggers the ctl_getitem function to return a NULL value.

Bugs

Notes

Author Note
mdeslaur trusty doesn’t use ctl_getitem without checking the return code
OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchntp< 1:4.2.8p4+dfsg-3ubuntu5.5UNKNOWN