CVE-2014-5209
Fixed in a distro release EPSS 3%
An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.
Products: ntp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | ntp | 1:4.2.8p3+dfsg-1 |
| Ubuntu Pro 14.04 LTS | ntp | no fix |