CVE-2014-9751

Name of the Vulnerable Software and Affected Versions ntp versions 4.x before 4.2.8p1

Description The issue arises from the read network packet function in ntpd not properly determining whether a source IP address is an IPv6 loopback address. This makes it easier for remote attackers to spoof restricted packets and read or write to the runtime state by sending a packet from the ::1 address to the ntpd machine's network interface.

Recommendations For ntp versions 4.x before 4.2.8p1, update to version 4.2.8p1 or later to resolve the issue.