CVE:CVE-2016-4954
CNNVD:CNNVD-201606-051
ntpd（Network Time Protocol daemon）是一个操作系统守护进程，它使用网络时间协议（NTP）与时间服务器的系统时间保持同步。
NTP 4.2.8p8之前4.x版本的ntpd中的ntp_proto.c文件中的‘process_packet’函数存在安全漏洞。远程攻击者可通过从多个源IP地址发送伪造的数据包利用该漏洞造成拒绝服务（peer-variable修改）。
solution:Upgrade ntp ntp to a higher version than 4.2.8,4.3.93,4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,4.2.8:p4,4.2.8:p5,4.2.8:p6,4.2.8:p7,and avoid the version [4.2.0,4.2.8),[4.3.0,4.3.93),4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,4.2.8:p4,4.2.8:p5,4.2.8:p6,4.2.8:p7; Upgrade oracle solaris to a higher version than 10,11.3,and avoid the version 10,11.3; Upgrade suse manager to a higher version than 2.1,and avoid the version 2.1; Upgrade suse manager_proxy to a higher version than 2.1,and avoid the version 2.1; Upgrade suse openstack_cloud to a higher version than 5,and avoid the version 5; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2; Upgrade suse linux_enterprise_desktop to a higher version than 12:sp1,and avoid the version 12:sp1; Upgrade suse linux_enterprise_server to a higher version than 11:sp2,11:sp3,11:sp4,12:sp1,and avoid the version 11:sp2,11:sp3,11:sp4,12:sp1; Upgrade siemens simatic_net_cp_443-1_opc_ua_firmware to a higher version than *; Upgrade siemens tim_4r-ie_firmware to a higher version than *; Upgrade siemens tim_4r-ie_dnp3_firmware to a higher version than *