diff options
| author | taca <taca@NetBSD.org> | 2015-07-09 15:58:51 +0000 |
|---|---|---|
| committer | taca <taca@NetBSD.org> | 2015-07-09 15:58:51 +0000 |
| commit | 6c9b7c508ec0e64f3024ade6f4bf93c22fc60462 (patch) | |
| tree | 44978e8db5035e0518dcfea5c22c4e22c3591259 /sys/dev/raidframe | |
| parent | bcca358a4d6a45a94c1924d3905b00c38a15c34a (diff) | |
Latest ntp is 4.2.8p3 which contains security fix (low risk).
Security Fix:
* [Sec 2853] Crafted remote config packet can crash some versions of
ntpd. Aleksis Kauppinen, Juergen Perlinger, Harlan Stenn.
Under specific circumstances an attacker can send a crafted packet to
cause a vulnerable ntpd instance to crash. This requires each of the
following to be true:
1) ntpd set up to allow remote configuration (not allowed by default), and
2) knowledge of the configuration password, and
3) access to a computer entrusted to perform remote configuration.
This vulnerability is considered low-risk.
Diffstat (limited to 'sys/dev/raidframe')
0 files changed, 0 insertions, 0 deletions
