[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-Disclosure] Re: ntpd segfaults accessing IPv6 hosts
- To: Bernhard Kuemel <bernhard@xxxxxxxx>, full-disclosure@xxxxxxxxxxxxxxxx
- Subject: [Full-Disclosure] Re: ntpd segfaults accessing IPv6 hosts
- From: mayer@xxxxxxx
- Date: Mon, 01 Nov 2004 10:30:26 -0500
----- Original Message Follows -----
> Hi full-disclosure!
>
> ntpd 1:4.2.0a-11 (as in debian testing/sarge and unstable/sid)
> segfaults when accessing ntp servers on IPv6 hosts. I don't know
> whether this bug is exploitable. But such a server on
> pool.ntp.org might DoS many servers.
There are no IPv6 addresses in pool.ntp.org so there is no risk here.
(dig AAAA pool.ntp.org)
>
> There is a fixed version available.
>
The latest ntp-dev tarball should have the fixes. Currently the
number of ntp servers with IPv6 AAAA records is very low.
> For more details see http://bugzilla.ntp.org/show_bug.cgi?id=353
>
> Bernhard
>
Danny
NTP Development
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html