CVE-2013-5211

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.7p26

Description The issue is related to the monlist feature in ntpd, which allows remote attackers to cause a denial of service (traffic amplification) via forged requests, specifically REQ MON GETLIST or REQ MON GETLIST 1 requests. This vulnerability has been exploited in the wild. The problem is associated with insufficient control over the volume of transmitted network messages, enabling a remote attacker to send specially crafted requests and cause a denial of service.

Recommendations For versions prior to 4.2.7p26, update to version 4.2.7p26 or later to resolve the issue. As a temporary workaround, consider disabling the monlist feature in ntpd to prevent exploitation until a patch is applied. Restrict access to the REQ MON GETLIST and REQ MON GETLIST 1 requests to minimize the risk of denial of service attacks.