CVE-2020-11868 Denial of service in n/a
An off-path attacker can block unauthenticated NTP synchronization by sending spoofed packets, causing a denial of service for time synchronization.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-11868?
CVE-2020-11868 is a medium-severity denial of service vulnerability in Debian Debian Linux, published on 17 Apr 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp.
Weakness: CWE-346
Which versions are affected by CVE-2020-11868?
It affects 17 products.
Products include Debian Debian Linux, Netapp All Flash Fabric-Attached Storage 8300 Firmware, Netapp All Flash Fabric-Attached Storage 8700 Firmware, Netapp All Flash Fabric-Attached Storage A400 Firmware, Netapp Clustered Data Ontap, Netapp Data Ontap and 11 more.
How do I fix CVE-2020-11868?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-11868 being exploited?
There is no known exploitation of CVE-2020-11868 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as CLSA-2021-1633442934, CLSA-2021-1634922835, DEBIAN-CVE-2020-11868, DLA-2201-1, GHSA-57qq-hwp2-xmcj, MGASA-2020-0212 and 1 more.