NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "ntp", "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.5" }, { "binary_name": "ntp-dbgsym", "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.5" }, { "binary_name": "ntp-doc", "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.5" }, { "binary_name": "ntpdate", "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.5" }, { "binary_name": "ntpdate-dbgsym", "binary_version": "1:4.2.8p4+dfsg-3ubuntu5.5" } ] }