[ glsa 201805-12 ] ntp

[GLSA]

Gentoo Linux Security Advisory

Title: NTP: Multiple vulnerabilities (GLSA 201805-12)
Severity: normal
Exploitable: remote
Date: 2018-05-26
Bug(s): #649612
ID: 201805-12

Synopsis

Multiple vulnerabilities have been found in NTP, the worst of which
could lead to remote code execution.


Background

NTP contains software for the Network Time Protocol.

Affected Packages

Package: net-misc/ntp
Vulnerable: < 4.2.8_p11
Unaffected: >= 4.2.8_p11
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in NTP. Please review the
CVE identifiers referenced below for details.


Impact

A remote attacker could possibly execute arbitrary code or cause a
Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All NTP users should upgrade to the latest version: