Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-6464

Fixed in a distro release EPSS 5%

NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.

Published 2017-03-27 · CVE record · OSV

Products: ntp

Distro releases

ReleasePackageFixed in
Amazon Linux 2ntp4.2.6p5-28.amzn2.2.1
Amazon Linux 2ntp-doc4.2.6p5-28.amzn2.2.1
Amazon Linux 2ntp-perl4.2.6p5-28.amzn2.2.1
Amazon Linux 2ntpdate4.2.6p5-28.amzn2.2.1
Amazon Linux 2sntp4.2.6p5-28.amzn2.2.1
Debian 11ntp1:4.2.8p10+dfsg-1
Red Hat Enterprise Linux 6ntp0:4.2.6p5-12.el6_9.1
Red Hat Enterprise Linux 6ntp-debuginfo0:4.2.6p5-12.el6_9.1
Red Hat Enterprise Linux 6ntp-doc0:4.2.6p5-12.el6_9.1
Red Hat Enterprise Linux 6ntp-perl0:4.2.6p5-12.el6_9.1
Red Hat Enterprise Linux 6ntpdate0:4.2.6p5-12.el6_9.1
Red Hat Enterprise Linux 7ntp0:4.2.6p5-28.el7
Red Hat Enterprise Linux 7ntp-debuginfo0:4.2.6p5-28.el7
Red Hat Enterprise Linux 7ntp-doc0:4.2.6p5-28.el7
Red Hat Enterprise Linux 7ntp-perl0:4.2.6p5-28.el7
Red Hat Enterprise Linux 7ntpdate0:4.2.6p5-28.el7
Red Hat Enterprise Linux 7sntp0:4.2.6p5-28.el7
SUSE Linux Enterprise Desktop 12 SP1ntp4.2.8p10-60.1
SUSE Linux Enterprise Desktop 12 SP2ntp4.2.8p10-60.1
SUSE Linux Enterprise Server 11 SP4ntp4.2.8p10-63.1
SUSE Linux Enterprise Server 12 SP1ntp4.2.8p10-60.1
SUSE Linux Enterprise Server 12 SP2ntp4.2.8p10-60.1
SUSE Linux Enterprise Server 12-LTSSntp4.2.8p10-46.23.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2ntp4.2.8p10-60.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4ntp4.2.8p10-63.1
SUSE Linux Enterprise Server for SAP Applications 12ntp4.2.8p10-46.23.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1ntp4.2.8p10-60.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2ntp4.2.8p10-60.1
Ubuntu 14.04 LTSntp1:4.2.6.p5+dfsg-3ubuntu2.14.04.11
Ubuntu 16.04 LTSntp1:4.2.8p4+dfsg-3ubuntu5.5
openSUSE Tumbleweedntp4.2.8p15-7.2