NTP.Spoofed.KoD.DoS

Description

This indicates an attack attempt against a Denial of Service vulnerability in ntpd in NTP.
This vulnerability is caused by the program's inability to properly handle spoofed packets. A remote attacker may exploit this to cause a denial-of-service condition.

Affected Products

All ntp-4 releases up to, but not including 4.2.8p4, and 4.3.0 up to, but not including 4.3.77

Impact

Denial of Service: Remote attackers can crash vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
http://support.ntp.org/bin/view/Main/SecurityNotice

References