| Errata ID | 331 | 
|---|---|
| Date | 2016-11-23 | 
| Source package | ntp | 
| Fixed in version | 1:4.2.6.p5+dfsg-2.63.201611102010 | 
| Description | This update addresses the following issue(s): * incorrect handling of crypto NAK packets my result in denial of service (CVE-2016-1547) * Change the time of an ntpd client or deny service to an ntpd client by forcing it to change from basic client/server mode to interleaved symmetric mode (CVE-2016-1548) * Timing attack for authenticated packets (CVE-2016-1550) * Duplicate IPs on unconfig directives will cause an assertion failure (CVE-2016-2516) * Crafted addpeer with hmode > 7 causes out-of-bounds reference (CVE-2016-2518)  | 
				
| Additional notes | |
| CVE ID | CVE-2016-1547 CVE-2016-1548 CVE-2016-1550 CVE-2016-2516 CVE-2016-2518  | 
  
| UCS Bug number | #40770 | 
