Test ID:	1.3.6.1.4.1.25623.1.0.106407
Category:	Denial of Service
Title:	NTP.org 'ntpd' 4.2.7p22 - 4.2.8p8, 4.3.0 - 4.3.93 DoS Vulnerability (Nov 2016)
Summary:	NTP.org's reference implementation of NTP server, ntpd, is prone to a; denial of service vulnerability.
Description:	Summary: NTP.org's reference implementation of NTP server, ntpd, is prone to a denial of service vulnerability. Vulnerability Insight: If ntpd is configured to allow mrulist query requests from a server that sends a crafted malicious packet, ntpd will crash on receipt of that crafted malicious mrulist query packet. Vulnerability Impact: A remote attacker may be able to perform a denial of service on ntpd. Affected Software/OS: NTPd version 4.2.7p22 up to 4.2.8p8, 4.3.0 up to 4.3.93. Solution: Update to version 4.2.8p9, 4.3.94 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7434 BugTraq ID: 94448 http://www.securityfocus.com/bid/94448 CERT/CC vulnerability note: VU#633847 https://www.kb.cert.org/vuls/id/633847 https://www.exploit-db.com/exploits/40806/ FreeBSD Security Advisory: FreeBSD-SA-16:39 https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc http://www.securitytracker.com/id/1037354
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.