CVE:CVE-2016-7426
CNNVD:CNNVD-201611-523
NTP（Network Time Protocol,网络时间协议）是一种以数据包交换把两台电脑的时钟同步化的网络协议。
NTP 4.2.8p9之前的版本中存在安全漏洞。远程攻击者可通过发送带有伪造资源地址的响应利用该漏洞造成拒绝服务（防止资源响应）。
solution:Upgrade ntp ntp to a higher version than 4.2.8,4.3.94,4.2.5:p203,4.2.5:p204,4.2.5:p205,4.2.5:p206,4.2.5:p207,4.2.5:p208,4.2.5:p209,4.2.5:p210,4.2.5:p211,4.2.5:p212,4.2.5:p213,4.2.5:p214,4.2.5:p215,4.2.5:p216,4.2.5:p217,4.2.5:p218,4.2.5:p219,4.2.5:p220,4.2.5:p221,4.2.5:p222,4.2.5:p223,4.2.5:p224,4.2.5:p225,4.2.5:p226,4.2.5:p227,4.2.5:p228,4.2.5:p229,4.2.5:p230,4.2.5:p231_rc1,4.2.5:p232_rc1,4.2.5:p233_rc1,4.2.5:p234_rc1,4.2.5:p235_rc1,4.2.5:p236_rc1,4.2.5:p237_rc1,4.2.5:p238_rc1,4.2.5:p239_rc1,4.2.5:p240_rc1,4.2.5:p241_rc1,4.2.5:p242_rc1,4.2.5:p243_rc1,4.2.5:p244_rc1,4.2.5:p245_rc1,4.2.5:p246_rc1,4.2.5:p247_rc1,4.2.5:p248_rc1,4.2.5:p249_rc1,4.2.5:p250_rc1,4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,4.2.8:p4,4.2.8:p5,4.2.8:p6,4.2.8:p7,4.2.8:p8,and avoid the version [4.2.6,4.2.8),[4.3.0,4.3.94),4.2.5:p203,4.2.5:p204,4.2.5:p205,4.2.5:p206,4.2.5:p207,4.2.5:p208,4.2.5:p209,4.2.5:p210,4.2.5:p211,4.2.5:p212,4.2.5:p213,4.2.5:p214,4.2.5:p215,4.2.5:p216,4.2.5:p217,4.2.5:p218,4.2.5:p219,4.2.5:p220,4.2.5:p221,4.2.5:p222,4.2.5:p223,4.2.5:p224,4.2.5:p225,4.2.5:p226,4.2.5:p227,4.2.5:p228,4.2.5:p229,4.2.5:p230,4.2.5:p231_rc1,4.2.5:p232_rc1,4.2.5:p233_rc1,4.2.5:p234_rc1,4.2.5:p235_rc1,4.2.5:p236_rc1,4.2.5:p237_rc1,4.2.5:p238_rc1,4.2.5:p239_rc1,4.2.5:p240_rc1,4.2.5:p241_rc1,4.2.5:p242_rc1,4.2.5:p243_rc1,4.2.5:p244_rc1,4.2.5:p245_rc1,4.2.5:p246_rc1,4.2.5:p247_rc1,4.2.5:p248_rc1,4.2.5:p249_rc1,4.2.5:p250_rc1,4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,4.2.8:p4,4.2.8:p5,4.2.8:p6,4.2.8:p7,4.2.8:p8; Upgrade canonical ubuntu_linux to a higher version than 12.04,and avoid the version 12.04; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.3,7.4,7.6,7.7,and avoid the version 7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.3,7.4,7.5,7.6,7.7,and avoid the version 7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.3,7.6,7.7,and avoid the version 7.3,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade hpe hpux-ntp to a higher version than c.4.2.8.2.0,and avoid the version [b.11.31,c.4.2.8.2.0)