tocsin

Debian/ntp: medium 5.9

ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet

Action: Upgrade ntp to 1:4.2.8p8+dfsg-1 or later.

Affected

introducedfixedlast affected
01:4.2.8p8+dfsg-1-

Fixed versions

1:4.2.8p8+dfsg-1

Sources

published · modified · JSON