CVE-2019-11331

Name of the Vulnerable Software and Affected Versions Network Time Protocol (NTP) (affected versions not specified)

Description The issue is related to insufficient protection of service data during port randomization in the Network Time Protocol (NTP). This can be exploited by a remote attacker to cause a denial of service by connecting through port 123. The protocol's use of port 123, as specified in RFC 5905, even in modes where a fixed port number is not required, makes it easier for remote attackers to conduct off-path attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.