Related Vulnerabilities: CVE-2016-7431  

Zero Origin timestamp problems were fixed by Bug 2945 in ntp-4.2.8p6. However, subsequent timestamp validation checks introduced a regression in the handling of some Zero origin timestamp checks.

Severity Medium

Remote Yes

Type Insufficient validation

Description

Zero Origin timestamp problems were fixed by Bug 2945 in ntp-4.2.8p6. However, subsequent timestamp validation checks introduced a regression in the handling of some Zero origin timestamp checks.

AVG-80 ntp 4.2.8.p8-1 4.2.8.p9-1 High Fixed

AVG-79 ntp 4.2.8.p8-1 4.2.8.p9-1 High Fixed

26 Nov 2016 ASA-201611-28 AVG-79 ntp High multiple issues

http://support.ntp.org/bin/view/Main/NtpBug3102