CVE-2016-7434 log
| Source |
|
| Severity | Medium |
| Remote | Yes |
| Type | Denial of service |
| Description | If ntpd is configured to allow mrulist query requests from a server that sends a crafted malicious packet, ntpd will crash on receipt of that crafted malicious mrulist query packet. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-80 | ntp | 4.2.8.p8-1 | 4.2.8.p9-1 | High | Fixed | |
| AVG-79 | ntp | 4.2.8.p8-1 | 4.2.8.p9-1 | High | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 26 Nov 2016 | ASA-201611-28 | AVG-79 | ntp | High | multiple issues |
| References |
|---|
http://support.ntp.org/bin/view/Main/NtpBug3082 |
| Notes |
|---|
Mitigation: Only allow mrulist query packets from trusted hosts. |