ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2020-04-17T03:31:05

Updated: 2021-07-20T22:54:02

Reserved: 2020-04-17T00:00:00


Link: CVE-2020-11868

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2020-04-17T04:15:10.987

Modified: 2022-04-26T17:05:56.937


Link: CVE-2020-11868

JSON object: View

cve-icon Redhat Information

No data.

CWE