# MA-614.062016: MyCERT Advisory - Vulnerabilities Identified in Network Time Protocol (ntpd)

**Date:** 06 Jun 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-614.062016  
**Advisory ID:** MA-614.062016

---

####
**1.0    Introduction**
The Network Time Foundation's NTP Project has released version ntp-4.2.8p8 to address multiple vulnerabilities in ntpd. Exploitation of one of these vulnerabilities may allow a remote attacker to cause a denial-of-service condition.
Network Time Protocol (NTP) is a networking protocol for clock synchronization between computer systems over packet-switched, variable-latency data networks. It is important for the security of networks, systems, communication and application protocols that require synchronized or accurate time on the computers on which they run.
**2.0    Impact**
Unauthenticated, remote attackers may be able to spoof or send specially crafted packets to create denial of service conditions.
**3.0    Affected Products**
•    ntpd version 4.2.8p7 and previous versions
**4.0    Recommendation**
MyCERT advise users of these applications to upgrade to the latest version of NTP product 4.2.8p8 which can be downloaded at:
<http://www.ntp.org/downloads.html>
Those unable to update should consider mitigations listed in NTP's security advisory listing available at below URL:
<http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#30534952554209090970534952554243555345425944491e5d49) or [[email protected]](/cdn-cgi/l/email-protection#e38e9a80869197a38e9a80869197cd8c9184cd8e9a)
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: <https://www.mycert.org.my>
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0    References**
•    <https://www.us-cert.gov/ncas/current-activity/2016/06/03/Vulnerabilities-Identified-Network-Time-Protocol-Daemon-ntpd>
•    [http://www.kb.cert.org/vuls/id/321640](http://www.kb.cert.org/vuls/id/321640 )
•    [http://support.ntp.org/bin/view/Main/SecurityNotice#Recent\_Vulnerabilities](http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities )
•    [https://en.wikipedia.org/wiki/Network\_Time\_Protocol](https://en.wikipedia.org/wiki/Network_Time_Protocol )