CVE-2013-5211
Fixed in a distro release EPSS 98%
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.
Products: opensuse, ntp, oracle linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | ntp | 4.2.8p15-3.amzn2.0.4 |
| Amazon Linux 2 | ntp-doc | 4.2.8p15-3.amzn2.0.4 |
| Amazon Linux 2 | ntp-perl | 4.2.8p15-3.amzn2.0.4 |
| Amazon Linux 2 | ntpdate | 4.2.8p15-3.amzn2.0.4 |
| Amazon Linux 2 | sntp | 4.2.8p15-3.amzn2.0.4 |
| Debian 11 | ntp | 1:4.2.8p3+dfsg-1 |
| openSUSE Tumbleweed | ntp | 4.2.8p9-1.1 |