Intrusion PreventionNTP.Monlist.Command.DoS
Description
This indicates an attack attempt against a Denial of Service vulnerability in NTP service.
The vulnerability is due to an error when the vulnerable software handles a maliciously crafted request. A remote attacker may be able to exploit this to cause a denial of service condition on the affected system.
Affected Products
NTP before 4.2.7p26
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Upgrade to the NTP version 4.2.7, which removes the monlist command entirely. Or you can start the NTP daemon with noquery enabled in the NTP conf file. This will disable access to mode 6 and 7 query packetts.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 38074 |
| Created | Mar 10, 2014 |
| Updated | Apr 16, 2019 |
| Risk |
|
| CVE ID | CVE-2013-5211 |
| Exploit Prediction Score | 96.7% |
| Default Action | pass |
| Active | |
| Affected OS | Linux |
| Affected App | Other |