Updated: 2024-11-23 05:10:03.627471
Description:
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.
| Links | NIST | CIRCL | RHEL | Ubuntu |
| Severity | Score | |
|---|---|---|
| CVSS Version 2.x | MEDIUM | 5 |
| CVSS Version 3.x | 0 |
| OS name | Project name | Version | Score | Severity | Status | Errata | Last updated | Statement |
|---|---|---|---|---|---|---|---|---|
| CentOS 6 ELS | ntp | 4.2.6 | 0.0 | Released | CLSA-2021:1633442934 | 2022-05-05 12:36:08 | ||
| CloudLinux 6 ELS | ntp | 4.2.6 | 0.0 | Released | 2021-12-09 07:57:05 | |||
| Oracle Linux 6 ELS | ntp | 4.2.6 | 0.0 | Not Vulnerable | 2021-12-09 07:57:05 | |||
| Ubuntu 16.04 ELS | ntp | 4.2.8 | 0.0 | Ignored | 2021-12-09 07:57:05 |