K20804323 : NTP vulnerability CVE-2016-2518

Security Advisory Description

The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value. (CVE-2016-2518)
Using a crafted packet to create a peer association with hmode > 7 causes the MATCH_ASSOC() lookup to make an out-of-bounds reference.
Impact
A remote attacker may be able to cause a denial of service (DoS) using a crafted packet.