NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.5", "binary_name": "ntp" }, { "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.5", "binary_name": "ntp-dbgsym" }, { "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.5", "binary_name": "ntp-doc" }, { "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.5", "binary_name": "ntpdate" }, { "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.5", "binary_name": "ntpdate-dbgsym" } ] }