tocsin

Debian/ntp: high 7.5

ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.

Action: Upgrade ntp to 1:4.2.8p8+dfsg-1 or later.

Affected

introducedfixedlast affected
01:4.2.8p8+dfsg-1-

Fixed versions

1:4.2.8p8+dfsg-1

Sources

published · modified · JSON