PT-2017-10049

CVE-2016-9311

·

Published

2016-12-08

·

Updated

2024-06-15

Description by

CVSS 2.0
7.1
High
MetricsAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p9
Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference when the trap service is enabled. This can be achieved by sending specially crafted packets to the affected system.
Recommendations For versions prior to 4.2.8p9, update to version 4.2.8p9 or later to resolve the issue. As a temporary workaround, consider disabling the trap service until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2017-2335
CESA-2017_0252
MGASA-2016-0414
OPENSUSE-SU-2024:10181-1
RHSA-2017:0252
RHSA-2017_0252
SUSE-SU-2016:3193-1
SUSE-SU-2016:3195-1
SUSE-SU-2016:3196-1
SUSE-SU-2017:0255-1
USN-3349-1
USN-3707-2
Found an issue in the description? Have something to add? Feel free to write us 👾