CVE-2016-2519

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p7 NTP versions 4.3.x prior to 4.3.92

Description The issue allows remote attackers to cause a denial of service, resulting in ntpd abort. This is triggered by a large request data value, which causes the ctl getitem function to return a NULL value.

Recommendations For NTP versions prior to 4.2.8p7, update to version 4.2.8p7 or later. For NTP versions 4.3.x prior to 4.3.92, update to version 4.3.92 or later.