tocsin

Debian/ntp: medium 5.3

NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.

Action: Upgrade ntp to 1:4.2.8p9+dfsg-1 or later.

Affected

introducedfixedlast affected
01:4.2.8p9+dfsg-1-

Fixed versions

1:4.2.8p9+dfsg-1

Sources

published · modified · JSON