漏洞描述
The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.
影响产品
暂无结构化产品信息。
修复建议
建议关注厂商安全公告,及时升级至已修复版本,并结合实际资产暴露情况采取缓解措施。
参考链接
www.securityfocus.comhttp://www.securityfocus.com/bid/94448↗security.freebsd.orghttps://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc↗nwtime.orghttp://nwtime.org/ntp428p9_release/↗support.ntp.orghttp://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities↗www.kb.cert.orghttps://www.kb.cert.org/vuls/id/633847↗h20566.www2.hpe.comhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us↗www.securitytracker.comhttp://www.securitytracker.com/id/1037354↗support.ntp.orghttp://support.ntp.org/bin/view/Main/NtpBug3082↗bto.bluecoat.comhttps://bto.bluecoat.com/security-advisory/sa139↗