CVE ID:	CVE-2014-9750
Description:	ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obtain sensitive information from process memory or cause a denial of service (daemon crash) via a packet containing an extension field with an invalid value for the length of its value field.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2019.1555   1.3.6.1.4.1.25623.1.1.1.2.2015.335   1.3.6.1.4.1.25623.1.0.120597   1.3.6.1.4.1.25623.1.0.703154   1.3.6.1.4.1.25623.1.0.871612   1.3.6.1.4.1.25623.1.0.703388   1.3.6.1.4.1.25623.1.1.2.2016.1060   1.3.6.1.4.1.25623.1.0.871685
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9750 BugTraq ID: 72583 http://www.securityfocus.com/bid/72583 CERT/CC vulnerability note: VU#852879 http://www.kb.cert.org/vuls/id/852879 Debian Security Information: DSA-3388 (Google Search) http://www.debian.org/security/2015/dsa-3388 RedHat Security Advisories: RHSA-2015:1459 http://rhn.redhat.com/errata/RHSA-2015-1459.html