Skip to content
OpenAdvisories
High ELSA-2016-3612 1 CVE

Important: ntp security update (Oracle Linux 7)

Published Sep 9, 2016 · Updated Sep 9, 2016

Summary

[4.2.6p5-22.0.1.el7_2.2]
- add disable monitor to default ntp.conf [CVE-2013-5211]

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 ntp 0:4.2.6p5-22.0.1.el7_2.2
Oracle Linux · 7 ntp-doc 0:4.2.6p5-22.0.1.el7_2.2
Oracle Linux · 7 ntp-perl 0:4.2.6p5-22.0.1.el7_2.2
Oracle Linux · 7 ntpdate 0:4.2.6p5-22.0.1.el7_2.2
Oracle Linux · 7 sntp 0:4.2.6p5-22.0.1.el7_2.2

Vulnerabilities 1

  • Unscored —
    CVE-2013-5211 Public exploit EPSS 98%

    The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of servic…