NTP Multiple Denial-of-Service Vulnerabilities -Mar17

The host is running NTP and is prone to multiple denial of service vulnerabilities.

Multiple flaws exists due to - Improper handling of a malformed mode configuration directive. - A buffer overflow error in Legacy Datum Programmable Time Server refclock driver. - Improper handling of an invalid setting via the :config directive. - Incorrect pointer usage in the function 'ntpq_stripquotes'. - No allocation of memory for a specific amount of items of the same size in 'oreallocarray' function. - ntpd configured to use the PPSAPI under Windows. - Limited passed application path size under Windows. - An error leading to garbage registry creation in Windows. - Copious amounts of Unused Code. - Off-by-one error in Oncore GPS Receiver. - Potential Overflows in 'ctl_put' functions. - Improper use of 'snprintf' function in mx4200_send function. - Buffer Overflow in ntpq when fetching reslist from a malicious ntpd. - Potential Overflows in 'ctl_put' functions. - Potential denial of service in origin timestamp check functionality of ntpd.

NTP versions 4.x before 4.2.8p10 and 4.3.x before 4.3.94

Checks if a vulnerable version is present on the target host.

Upgrade to NTP version 4.2.8p10 or 4.3.94 or later.