Описание
The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ntp | fixed | 1:4.2.8p9+dfsg-1 | package | |
| ntp | no-dsa | jessie | package | |
| ntp | no-dsa | wheezy | package |
Примечания
http://support.ntp.org/bin/view/Main/NtpBug3118
http://www.talosintelligence.com/reports/TALOS-2016-0203/
Only affects configurations that do not have "restrict noquery", Debian's default config does have that restriction.
EPSS
Связанные уязвимости
The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.
The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.
The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.
The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.
EPSS