| Package | Affected versions | Patched versions |
|---|---|---|
| ntp | = 4.2.8≥ 4.2.0, < 4.2.8≥ 4.3.0, < 4.3.93 | 4.2.84.3.93 |
| manager | = 2.1 | |
| manager proxy | = 2.1 | |
| openstack cloud | = 5 |
The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free