Red Hat Security Advisory

RHSA-2016:0063

ntp security update

Released 2016-01-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) ntp-4.2.6p5-22.el7_2.1, ntpdate-4.2.6p5-22.el7_2.1
Red Hat Enterprise Linux Client Optional (v. 7) ntp-doc-4.2.6p5-22.el7_2.1, ntp-perl-4.2.6p5-22.el7_2.1, sntp-4.2.6p5-22.el7_2.1
Red Hat Enterprise Linux ComputeNode (v. 7) ntp-4.2.6p5-22.el7_2.1, ntpdate-4.2.6p5-22.el7_2.1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) ntp-doc-4.2.6p5-22.el7_2.1, ntp-perl-4.2.6p5-22.el7_2.1, sntp-4.2.6p5-22.el7_2.1
Red Hat Enterprise Linux Desktop (v. 6) ntp-4.2.6p5-5.el6_7.4, ntpdate-4.2.6p5-5.el6_7.4
Red Hat Enterprise Linux Desktop Optional (v. 6) ntp-doc-4.2.6p5-5.el6_7.4, ntp-perl-4.2.6p5-5.el6_7.4
Red Hat Enterprise Linux HPC Node (v. 6) ntp-4.2.6p5-5.el6_7.4, ntpdate-4.2.6p5-5.el6_7.4
Red Hat Enterprise Linux HPC Node Optional (v. 6) ntp-doc-4.2.6p5-5.el6_7.4, ntp-perl-4.2.6p5-5.el6_7.4
Red Hat Enterprise Linux Server (v. 6) ntp-4.2.6p5-5.el6_7.4, ntpdate-4.2.6p5-5.el6_7.4
Red Hat Enterprise Linux Server (v. 7) ntp-4.2.6p5-22.el7_2.1, ntpdate-4.2.6p5-22.el7_2.1
Red Hat Enterprise Linux Server Optional (v. 6) ntp-doc-4.2.6p5-5.el6_7.4, ntp-perl-4.2.6p5-5.el6_7.4
Red Hat Enterprise Linux Server Optional (v. 7) ntp-doc-4.2.6p5-22.el7_2.1, ntp-perl-4.2.6p5-22.el7_2.1, sntp-4.2.6p5-22.el7_2.1
Red Hat Enterprise Linux Workstation (v. 6) ntp-4.2.6p5-5.el6_7.4, ntpdate-4.2.6p5-5.el6_7.4
Red Hat Enterprise Linux Workstation (v. 7) ntp-4.2.6p5-22.el7_2.1, ntpdate-4.2.6p5-22.el7_2.1
Red Hat Enterprise Linux Workstation Optional (v. 6) ntp-doc-4.2.6p5-5.el6_7.4, ntp-perl-4.2.6p5-5.el6_7.4
Red Hat Enterprise Linux Workstation Optional (v. 7) ntp-doc-4.2.6p5-22.el7_2.1, ntp-perl-4.2.6p5-22.el7_2.1, sntp-4.2.6p5-22.el7_2.1

Fixes 1 record

TI-2015-06753 CVE-2015-8138 · GHSA-5mf2-6mvq-v64v

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin…

LOW 33

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.06255 Published 2017-01-30 Fixed CWE-20