Remote Yes

Type Denial of service

Description

If ntpd is configured to allow mrulist query requests from a server that sends a crafted malicious packet, ntpd will crash on receipt of that crafted malicious mrulist query packet.

AVG-80 ntp 4.2.8.p8-1 4.2.8.p9-1 High Fixed

AVG-79 ntp 4.2.8.p8-1 4.2.8.p9-1 High Fixed

26 Nov 2016 ASA-201611-28 AVG-79 ntp High multiple issues

http://support.ntp.org/bin/view/Main/NtpBug3082

Mitigation:
Only allow mrulist query packets from trusted hosts.