CVE-2019-8936

Name of the Vulnerable Software and Affected Versions NTP versions through 4.2.8p12

Description The issue is related to a NULL pointer dereference in the ntpd daemon implementation of the NTP protocol. This could allow a remote attacker to cause a denial of service. By sending specially crafted mode 6 packets, an attacker could exploit this vulnerability to cause the ntpd daemon to crash.

Recommendations For NTP versions through 4.2.8p12, consider restricting access to mode 6 packets to minimize the risk of exploitation until a patch is available. As a temporary workaround, monitor the ntpd daemon for SIGSEGV signals and restart the service if necessary to maintain availability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.