REDHAT-BUG-1254544: Low severity NTP ntpd vulnerability
It was found that ntpd exits with a segmentation fault when a statistics type that was not enabled during compilation (e.g. timingstats) is referenced by the statistics or filegen configuration command, for example:
ntpq -c ':config statistics timingstats' ntpq -c ':config filegen timingstats'
Upstream patch:
http://bk.ntp.org/ntp-dev/?PAGE=patch&REV=4d253ed0A400LyhRQIV0u23NJwuGAA
(in 4.2.6, the code than handles NULL == filegen needs to be adjusted as the outer loop was changed from while to for)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ntpdto a version that resolves this vulnerability.Patch 4d253ed0A400LyhRQIV0u23NJwuGAA
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1254544?
REDHAT-BUG-1254544 has been identified as a critical vulnerability due to the segmentation fault caused by referencing unsupported statistics types.
How does REDHAT-BUG-1254544 affect NTP ntpd?
REDHAT-BUG-1254544 causes NTP ntpd to exit unexpectedly with a segmentation fault when invalid statistics types are requested.
How do I fix REDHAT-BUG-1254544?
To fix REDHAT-BUG-1254544, ensure that the configuration doesn't request unsupported statistics types or compile NTP ntpd with the necessary statistics enabled.
What versions of NTP ntpd are affected by REDHAT-BUG-1254544?
All versions of NTP ntpd that have not disabled the specific statistics types during compilation may be affected by REDHAT-BUG-1254544.
Is there a workaround for REDHAT-BUG-1254544?
The workaround for REDHAT-BUG-1254544 is to avoid referencing statistics types not enabled during the compilation of NTP ntpd.