Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-4954
7.5
HIGHCVSS v3
Published
July 5, 2016
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.
ntp-project/ntp
GitHubThe full and complete NTP Reference Implementation from the Network Time Protocol Project at Network Time Foundation.
GitHubThe full and complete NTP Reference Implementation from the Network Time Protocol Project at Network Time Foundation.= 4.2.8, >= 4.2.0, < 4.2.8, >= 4.3.0, < 4.3.93NVD