Unscored CVE-2014-5209 EUVD-2014-5107GHSA-m44h-f944-f3x3

An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could …

Published Jan 8, 2020 · Updated Aug 6, 2024 · Assigned by certcc

Vendor: NTP Project Product: NTP Package: ntp Package: ntp Ecosystem: Debian Ecosystem: Ubuntu

Description

An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.

Affected products

Vendor	Product	Affected	Fixed
NTP	NTP	4.2.7p25	—

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 11	ntp	1:4.2.8p3+dfsg-1	—

Ubuntu