CVE:CVE-2015-5195
CNNVD:CNNVD-201509-466
NTP是nwtime开源的一个网络时间协议。
NTP 4.2.7p112之前的版本存在输入验证错误漏洞。远程攻击者利用该漏洞导致系统拒绝服务。
solution:Upgrade fedoraproject fedora to a higher version than 21,22,23,and avoid the version 21,22,23; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,15.10,and avoid the version 12.04,14.04,15.04,15.10; Upgrade ntp ntp to a higher version than *:p111,and avoid the version *:p111