CVE-2017-6464 ntp: Denial of Service via malformed config

CVE ID

CVE-2017-6464

DESCRIPTION

A vulnerability was discovered in the NTP server's parsing of configuration
directives. A remote, authenticated attacker could cause ntpd to crash by
sending a crafted message.

CVSS3 Base Score    5.3

Related CVEs: CVE-2017-6463, CVE-2017-6462
 

RESOLUTION

Fixed in latest Unitrends security update with
   ntp-4.2.6p5-12.el6.centos.1

LINK TO ADVISORIES

• https://nvd.nist.gov/vuln/detail/CVE-2017-6464
• https://access.redhat.com/security/cve/cve-2017-6464
• https://access.redhat.com/security/cve/cve-2017-6463
• https://access.redhat.com/security/cve/cve-2017-6462