CVE-2020-11868

Fixed in a distro release EPSS 2%CVSS 5.9

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp.

Published 2020-04-17 · CVE record · OSV

Products: ntp, redhat enterprise_linux, netapp data_ontap, netapp hci_management_node, netapp solidfire, netapp vasa_provider_for_clustered_data_ontap, netapp virtual_storage_console, netapp clustered_data_ontap, netapp hci_storage_node_firmware, netapp fabric-attached_storage_8300_firmware, netapp fabric-attached_storage_8700_firmware, netapp fabric-attached_storage_a400_firmware, netapp all_flash_fabric-attached_storage_8300_firmware, netapp all_flash_fabric-attached_storage_8700_firmware, netapp all_flash_fabric-attached_storage_a400_firmware, debian_linux, opensuse leap

Distro releases