CVE-2009-3563
mediumpriority · attend · 47EPSS 0.321 · 98 %ileexploit · functionalDEEURUUSEPSS · scored 2026-10-22
ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.i386 as a component of Red Hat Enterprise Linux AS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.i386 as a component of Red Hat Enterprise Linux ES version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.i386 as a component of Red Hat Enterprise Linux WS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.ia64 as a component of Red Hat Enterprise Linux AS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.ia64 as a component of Red Hat Enterprise Linux ES version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.ia64 as a component of Red Hat Enterprise Linux WS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.ppc as a component of Red Hat Enterprise Linux AS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.s390 as a component of Red Hat Enterprise Linux AS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.s390x as a component of Red Hat Enterprise Linux AS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.src as a component of Red Hat Enterprise Linux AS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.src as a component of Red Hat Enterprise Linux Desktop version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.src as a component of Red Hat Enterprise Linux ES version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.src as a component of Red Hat Enterprise Linux WS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.0.a.20040617-8.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.2p1-9.el5_4.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.2p1-9.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.2p1-9.el5_4.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.2p1-9.el5_4.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.2p1-9.el5_4.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.2p1-9.el5_4.1.src as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.2p1-9.el5_4.1.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.2p1-9.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.2.2p1-9.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.0.a.20040617-8.el4_8.1.i386 as a component of Red Hat Enterprise Linux AS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.0.a.20040617-8.el4_8.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.0.a.20040617-8.el4_8.1.i386 as a component of Red Hat Enterprise Linux ES version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.0.a.20040617-8.el4_8.1.i386 as a component of Red Hat Enterprise Linux WS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.0.a.20040617-8.el4_8.1.ia64 as a component of Red Hat Enterprise Linux AS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.0.a.20040617-8.el4_8.1.ia64 as a component of Red Hat Enterprise Linux ES version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.0.a.20040617-8.el4_8.1.ia64 as a component of Red Hat Enterprise Linux WS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.0.a.20040617-8.el4_8.1.ppc as a component of Red Hat Enterprise Linux AS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.0.a.20040617-8.el4_8.1.s390 as a component of Red Hat Enterprise Linux AS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.0.a.20040617-8.el4_8.1.s390x as a component of Red Hat Enterprise Linux AS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.0.a.20040617-8.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.0.a.20040617-8.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.0.a.20040617-8.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.0.a.20040617-8.el4_8.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.2p1-9.el5_4.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.2p1-9.el5_4.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.2p1-9.el5_4.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.2p1-9.el5_4.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.2p1-9.el5_4.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.2p1-9.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-debuginfo-0:4.2.2p1-9.el5_4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1648 - Fixedntp-0:4.1.2-6.el3.i386 as a component of Red Hat Desktop version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.i386 as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.i386 as a component of Red Hat Enterprise Linux ES version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.i386 as a component of Red Hat Enterprise Linux WS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.ppc as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.s390 as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.s390x as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.src as a component of Red Hat Desktop version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.src as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.src as a component of Red Hat Enterprise Linux ES version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.src as a component of Red Hat Enterprise Linux WS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.x86_64 as a component of Red Hat Desktop version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-0:4.1.2-6.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-debuginfo-0:4.1.2-6.el3.i386 as a component of Red Hat Desktop version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-debuginfo-0:4.1.2-6.el3.i386 as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-debuginfo-0:4.1.2-6.el3.i386 as a component of Red Hat Enterprise Linux ES version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-debuginfo-0:4.1.2-6.el3.i386 as a component of Red Hat Enterprise Linux WS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-debuginfo-0:4.1.2-6.el3.ia64 as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-debuginfo-0:4.1.2-6.el3.ia64 as a component of Red Hat Enterprise Linux ES version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-debuginfo-0:4.1.2-6.el3.ia64 as a component of Red Hat Enterprise Linux WS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-debuginfo-0:4.1.2-6.el3.ppc as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-debuginfo-0:4.1.2-6.el3.s390 as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-debuginfo-0:4.1.2-6.el3.s390x as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-debuginfo-0:4.1.2-6.el3.x86_64 as a component of Red Hat Desktop version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-debuginfo-0:4.1.2-6.el3.x86_64 as a component of Red Hat Enterprise Linux AS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-debuginfo-0:4.1.2-6.el3.x86_64 as a component of Red Hat Enterprise Linux ES version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - Fixedntp-debuginfo-0:4.1.2-6.el3.x86_64 as a component of Red Hat Enterprise Linux WS version 3redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:1651 - FixedSIMA² Master Stationauma_psirt
Upgrade your SIMA2 to software version 2.6 or above. The NTP service of the SIMA2 Master Station with software version V2.6 and above includes a current, supported version of ntpd.
- MitigationSIMA² Master Stationauma_psirt
1. If your SIMA2 does not need to provide time information to other systems or synchronize itself with an NTP server, disable the NTP client on those systems. Please note that the NTP client is disabled by default in SIMA2 2. In case you must use the NTP server on an SIMA2, choose from the following options to reduce NTP-based risks: - Allow NTP traffic to/from trusted NTP clients only - Monitor the network for malicious NTP traffic going to/coming from the SIMA2 - Filter malicious NTP traffic going to/coming from the SIMA2 Monitor NTP server operations on your SIMA2 (server availability, correctness of advertised time, NTP-related log entries, etc.) 3. In case you must use the NTP client on an SIMA2, choose from the following options to reduce NTP-based risks: - Use trusted NTP servers only - Allow NTP traffic to/from trusted NTP servers only - Monitor the network for malicious NTP traffic targeting the SIMA2 - Filter malicious NTP traffic targeting the SIMA2 - Monitor NTP client operations on your SIMA2 (correctness of system time, NTP-related log entries, etc.)
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–8.6
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (1)
Public proof-of-concept and weaponised exploit code.
- auxiliary/dos/ntp/ntpd_reserved_dosNTP.org ntpd Reserved Mode Denial of Servicefunctional · metasploit
affected products (116)
Products and version ranges known to be affected.
advisories (5)
Vendor and ecosystem advisories describing this.
- RHSA-2009:1648Red Hat Security Advisory: ntp security update2009-12-08csaf · redhat_csafUS
An updated ntp package that fixes a security issue is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team.
- RHSA-2009:1651Red Hat Security Advisory: ntp security update2009-12-08csaf · redhat_csafUS
An updated ntp package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team.
- VDE-2022-032AUMA: Multiple Vulnerabilities in Automation Runtime NTP Service2022-08-09csaf · auma_psirtDE
The SIMA2 Master Station features an NTP service based on ntpd, a reference implementation of the Network Time Protocol (NTP). Affected SIMA2 Master Stations with software version < V2.6 include an outdated version of ntpd which is affected by a large number of vulnerabilities
- WID-SEC-W-2023-1747Moxa Switch: Schwachstelle ermöglicht Denial of ServiceDeutsch2023-07-13csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Moxa Switch ausnutzen, um einen Denial of Service Angriff durchzuführen.
- WID-SEC-W-2024-0672UDP-basierte Protokollimplementierungen: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2024-03-19csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in UDP-basierten Protokollimplementierungen ausnutzen, um einen Denial of Service Angriff durchzuführen.
also known as (8)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (84)
External citations — patches, advisories, analysis.
- http://aix.software.ibm.com/aix/efixes/security/xntpd_advisory.ascenisa_euvd
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560074enisa_euvd
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673enisa_euvd
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691enisa_euvd
- http://lists.vmware.com/pipermail/security-announce/2010/000082.htmlenisa_euvd
- http://marc.info/?l=bugtraq&m=130168580504508&w=2enisa_euvd
- http://marc.info/?l=bugtraq&m=136482797910018&w=2enisa_euvd
- http://secunia.com/advisories/37629enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan