CVE:CVE-2015-7705
CNNVD:CNNVD-201510-586
NTP（Network Time Protocol，网络时间协议）是一款通过网络同步计算机时钟的协议。
NTP 4.2.8p4之前版本和4.3.77之前4.3.x版本中存在安全漏洞，该漏洞源于客户端没有正确验证Kiss-of-Death消息中的时间戳字段。攻击者可通过伪造数据包利用该漏洞造成拒绝服务，使客户端延迟或停止查询服务器端的时间更新。
solution:Upgrade ntp ntp to a higher version than 4.2.8,4.3.77,4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,and avoid the version [4.2.0,4.2.8),[4.3.0,4.3.77),4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3; Upgrade netapp oncommand_performance_manager to a higher version than -; Upgrade netapp oncommand_unified_manager to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp data_ontap to a higher version than -; Upgrade citrix xenserver to a higher version than 6.0.2,6.2.0,6.5,7.0,and avoid the version 6.0.2,6.2.0,6.5,7.0; Upgrade siemens tim_4r-ie_firmware to a higher version than *; Upgrade siemens tim_4r-ie_dnp3_firmware to a higher version than *