CVE:CVE-2014-9750
CNNVD:CNNVD-201510-026
ntpd（Network Time Protocol daemon）是一个操作系统守护进程，它使用网络时间协议（NTP）与时间服务器的系统时间保持同步。
NTP 4.2.8及之前版本的ntpd中的ntp_crypto.c文件存在安全漏洞。远程攻击者可通过发送包含可执行字段（该字段中包含无效的长度值）的数据包利用该漏洞获取进程内存中的敏感信息，或造成拒绝服务（守护进程崩溃）。
solution:Upgrade ntp ntp to a higher version than 4.2.8,4.2.8,and avoid the version [4.2.0,4.2.8),4.2.8; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade oracle linux to a higher version than 7,and avoid the version 7