Skip to content
OpenAdvisories
High ELSA-2016-0063 1 CVE

Important: ntp security update (Oracle Linux 7)

Published Jan 25, 2016 · Updated Jan 25, 2016

Ecosystem: Oracle Linux

Summary

[4.2.6p5-5.el6_7.4]
- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 ntp 0:4.2.6p5-22.el7_2.1
Oracle Linux · 7 ntp-doc 0:4.2.6p5-22.el7_2.1
Oracle Linux · 7 ntp-perl 0:4.2.6p5-22.el7_2.1
Oracle Linux · 7 ntpdate 0:4.2.6p5-22.el7_2.1
Oracle Linux · 7 sntp 0:4.2.6p5-22.el7_2.1

Vulnerabilities 1

  • Unscored —
    CVE-2015-8138

    NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a pack…

    ntp ntp Debian Ubuntu