Denial Of Service (DoS)

2019-05-0205:29:36

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.05 Low

EPSS

Percentile

92.9%

JSON

ntp is vulnerable to denial of service. A memory leak flaw was found in ntpd’s CRYPTO_ASSOC. If ntpd was configured to use autokey authentication, an attacker could send packets to ntpd that would, after several days of ongoing attack, cause it to run out of memory.

CPENameOperatorVersion
ntpeq4.2.6p5__1.el6
ntpeq4.2.4p8__3.el6
ntpeq4.2.6p5__2.el6_5
ntpeq4.2.6p5__2.el6_6
ntpeq4.2.6p5__5.el6
ntpeq4.2.4p8__2.el6
ntpeq4.2.6p5__5.el6_7.2
ntpeq4.2.6p5__5.el6_7.4
ntpeq4.2.6p5__3.el6_6

Name	Operator	Version
ntp	eq	4.2.6p5__1.el6
ntp	eq	4.2.4p8__3.el6
ntp	eq	4.2.6p5__2.el6_5
ntp	eq	4.2.6p5__2.el6_6
ntp	eq	4.2.6p5__5.el6
ntp	eq	4.2.4p8__2.el6
ntp	eq	4.2.6p5__5.el6_7.2
ntp	eq	4.2.6p5__5.el6_7.4
ntp	eq	4.2.6p5__3.el6_6