ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ntp | Ntp | 4.2.8-p7 (including) | 4.2.8-p7 (including) |
| Ntp | Ntp | 4.3.92 (including) | 4.3.92 (including) |
| Ntp | Ubuntu | wily | * |