Related Vulnerabilities: CVE-2016-7433  

ntpd Bug 2085 described a condition where the root delay was included twice, causing the jitter value to be higher than expected. Due to a misinterpretation of a small-print variable in The Book, the fix for this problem was incorrect, resulting in a root distance that did not include the peer dispersion. The calculations and formula have been reviewed and reconciled, and the code has been updated accordingly.

Severity Low

Remote Yes

Type Incorrect calculation

Description

ntpd Bug 2085 described a condition where the root delay was included twice, causing the jitter value to be higher than expected. Due to a misinterpretation of a small-print variable in The Book, the fix for this problem was incorrect, resulting in a root distance that did not include the peer dispersion. The calculations and formula have been reviewed and reconciled, and the code has been updated accordingly.

AVG-80 ntp 4.2.8.p8-1 4.2.8.p9-1 High Fixed

AVG-79 ntp 4.2.8.p8-1 4.2.8.p9-1 High Fixed

26 Nov 2016 ASA-201611-28 AVG-79 ntp High multiple issues

http://support.ntp.org/bin/view/Main/NtpBug3067
http://bugs.ntp.org/show_bug.cgi?id=2085