CVE:CVE-2015-7974
CNNVD:CNNVD-201601-632
NTP（Network Time Protocol，网络时间协议）是一款通过网络同步计算机时钟的协议。
NTP 4.2.8p6之前4.x版本和4.3.90之前4.3.x版本中存在安全漏洞，该漏洞源于程序执行数据包身份验证时没有检查对称密钥的对应关系。远程攻击者可借助任意的可信密钥利用该漏洞实施假冒攻击。
solution:Upgrade ntp ntp to a higher version than 4.2.8,4.3.90,4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,4.2.8:p4,4.2.8:p5,and avoid the version [4.2.0,4.2.8),[4.3.0,4.3.90),4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,4.2.8:p4,4.2.8:p5; Upgrade siemens tim_4r-ie_firmware to a higher version than *; Upgrade siemens tim_4r-ie_dnp3_firmware to a higher version than *; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp oncommand_balance to a higher version than -; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0