CVE:CVE-2020-11868
CNNVD:CNNVD-202004-1422
NTPsec是一个更安全的NTP。
NTPsec 存在访问控制错误漏洞。攻击者可借助特制的数据包利用该漏洞导致拒绝服务。
solution:Upgrade ntp ntp to a higher version than 4.2.7,4.3.100,4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p10,4.2.8:p11,4.2.8:p12,4.2.8:p13,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,4.2.8:p4,4.2.8:p5,4.2.8:p6,4.2.8:p7,4.2.8:p8,4.2.8:p9,and avoid the version (,4.2.7],[4.3.98,4.3.100),4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p10,4.2.8:p11,4.2.8:p12,4.2.8:p13,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,4.2.8:p4,4.2.8:p5,4.2.8:p6,4.2.8:p7,4.2.8:p8,4.2.8:p9; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade netapp data_ontap to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; netapp vasa_provider_for_clustered_data_ontap avoid the version [7.2,); netapp virtual_storage_console avoid the version [7.2,); Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp hci_storage_node_firmware to a higher version than -; Upgrade netapp fabric-attached_storage_8300_firmware to a higher version than -; Upgrade netapp fabric-attached_storage_8700_firmware to a higher version than -; Upgrade netapp fabric-attached_storage_a400_firmware to a higher version than -; Upgrade netapp all_flash_fabric-attached_storage_8300_firmware to a higher version than -; Upgrade netapp all_flash_fabric-attached_storage_8700_firmware to a higher version than -; Upgrade netapp all_flash_fabric-attached_storage_a400_firmware to a higher version than -; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2