Debian/ntp: high 7.5
The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to
Action: Upgrade ntp to 1:4.2.8p4+dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:4.2.8p4+dfsg-2 | - |
Fixed versions
| 1:4.2.8p4+dfsg-2 |
Sources
published · modified · JSON