NetworkTimeFoundation NTP CVE-2016-7433 Denial of Service Vulnerability

Description

Bug 2085 described a condition where the root delay was included twice, causing the jitter value to be higher than expected. Due to a misinterpretation of a small-print variable in The Book, the fix for this problem was incorrect, resulting in a root distance that did not include the peer dispersion. The calculations and formulae have been reviewed and reconciled, and the code has been updated accordingly.

Affected Applications

NTP

CVE References

Other References