CVE-2019-8936
Fixed in a distro release EPSS 6%
NTP through 4.2.8p12 has a NULL Pointer Dereference.
Products: netapp clustered_data_ontap, netapp data_ontap, fedoraproject fedora, opensuse leap, hpe hpux-ntp, ntp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | ntp | 1:4.2.8p12+dfsg-4 |
| SUSE Enterprise Storage 4 | ntp | 4.2.8p13-85.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | ntp | 4.2.8p13-85.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | ntp | 4.2.8p13-85.1 |
| SUSE Linux Enterprise Module for Legacy 15 | ntp | 4.2.8p13-4.6.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | ntp | 4.2.8p13-48.27.1 |
| SUSE Linux Enterprise Server 11 SP4 | ntp | 4.2.8p13-64.13.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | ntp | 4.2.8p13-85.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | ntp | 4.2.8p13-85.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | ntp | 4.2.8p13-85.1 |
| SUSE Linux Enterprise Server 12 SP3 | ntp | 4.2.8p13-85.1 |
| SUSE Linux Enterprise Server 12 SP4 | ntp | 4.2.8p13-85.1 |
| SUSE Linux Enterprise Server 12-LTSS | ntp | 4.2.8p13-46.32.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | ntp | 4.2.8p13-64.13.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | ntp | 4.2.8p13-85.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | ntp | 4.2.8p13-85.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | ntp | 4.2.8p13-85.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | ntp | 4.2.8p13-85.1 |
| SUSE OpenStack Cloud 7 | ntp | 4.2.8p13-85.1 |
| Ubuntu 18.04 LTS | ntp | 1:4.2.8p10+dfsg-5ubuntu7.3 |
| Ubuntu 20.04 LTS | ntp | 1:4.2.8p12+dfsg-3ubuntu4.20.04.1 |
| Ubuntu 22.04 LTS | ntp | 1:4.2.8p12+dfsg-3ubuntu6 |
| openSUSE Leap 15.0 | ntp | 4.2.8p13-lp150.8.1 |
| openSUSE Tumbleweed | ntp | 4.2.8p15-7.2 |