VDB

GCVE-110-MAGEIA-2020-212

GCVE-110-MAGEIA-2020-212
Advisory Published
Vulnetix · Advisory published May 15, 2020
The updated packages fix security vulnerabilities including: ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp. (CVE-2020-11868)

Affected Products

VendorProductVersionsPlatforms
Mageiantp0 (affected), 4.2.8p14-1.mga7 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›