Summary
[4.2.6p5-5.el6_7.2]
- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ntp | 0:4.2.6p5-19.el7_1.3 |
| Oracle Linux · 7 | ntp-doc | 0:4.2.6p5-19.el7_1.3 |
| Oracle Linux · 7 | ntp-perl | 0:4.2.6p5-19.el7_1.3 |
| Oracle Linux · 7 | ntpdate | 0:4.2.6p5-19.el7_1.3 |
| Oracle Linux · 7 | sntp | 0:4.2.6p5-19.el7_1.3 |
Vulnerabilities 2
-
Unscored —
The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was great…
-
Unscored —CVE-2015-7704 EPSS 11%
The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service …