This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

NTP vulnerability

Several vulnerabilities in NTP were revealed today, just in time for everyone to be away on vacation!

https://ics-cert.us-cert.gov/advisories/ICSA-14-353-01

Can we expect a hotfix for this?


This thread was automatically locked due to age.
Parents
  • ps shows a /sbin/ntpd running, but its not there.

    Other ntp tools all show  Ver. 4.2.6p5

    Cert states...

    Products using NTP service prior to NTP-4.2.8 are affected. No specific vendor is specified because this is an open source protocol.

    Am I missing something?

    UTM 9.210-20
Reply
  • ps shows a /sbin/ntpd running, but its not there.

    Other ntp tools all show  Ver. 4.2.6p5

    Cert states...

    Products using NTP service prior to NTP-4.2.8 are affected. No specific vendor is specified because this is an open source protocol.

    Am I missing something?

    UTM 9.210-20
Children
No Data