Fedora ntp CVE-2015-7704 Input Validation Bypass Vulnerability

Description

It was discovered that ntpd as a client did not correctly check timestamps in Kiss-of-Death packets. A remote attacker could use this flaw to send a crafted Kiss-of-Death packet to an ntpd client that would increase the client's polling interval value, and effectively disable synchronization with the server.

Affected Applications

ntp

CVE References

Other References