CVE:CVE-2016-4953
CNNVD:CNNVD-201606-050
ntpd（Network Time Protocol daemon）是一个操作系统守护进程，它使用网络时间协议（NTP）与时间服务器的系统时间保持同步。
NTP 4.2.8p8之前4.x版本的ntpd中存在安全漏洞。远程攻击者可通过在特定的时间发送带有不正确的身份验证数据的伪造的NTP数据包利用该漏洞造成拒绝服务（ephemeral-association恢复）。
solution:Upgrade ntp ntp to a higher version than 4.2.8,4.3.93,4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,4.2.8:p4,4.2.8:p5,4.2.8:p6,4.2.8:p7,and avoid the version [4.2.0,4.2.8),[4.3.0,4.3.93),4.2.8,4.2.8:p1,4.2.8:p1-beta1,4.2.8:p1-beta2,4.2.8:p1-beta3,4.2.8:p1-beta4,4.2.8:p1-beta5,4.2.8:p1-rc1,4.2.8:p1-rc2,4.2.8:p2,4.2.8:p2-rc1,4.2.8:p2-rc2,4.2.8:p2-rc3,4.2.8:p3,4.2.8:p3-rc1,4.2.8:p3-rc2,4.2.8:p3-rc3,4.2.8:p4,4.2.8:p5,4.2.8:p6,4.2.8:p7; Upgrade oracle solaris to a higher version than 10,11.3,and avoid the version 10,11.3; Upgrade suse manager to a higher version than 2.1,and avoid the version 2.1; Upgrade suse manager_proxy to a higher version than 2.1,and avoid the version 2.1; Upgrade suse openstack_cloud to a higher version than 5,and avoid the version 5; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2; Upgrade suse linux_enterprise_desktop to a higher version than 12:sp1,and avoid the version 12:sp1; Upgrade suse linux_enterprise_server to a higher version than 11:sp2,11:sp3,11:sp4,12:sp1,and avoid the version 11:sp2,11:sp3,11:sp4,12:sp1; Upgrade siemens simatic_net_cp_443-1_opc_ua_firmware to a higher version than *; Upgrade siemens tim_4r-ie_firmware to a higher version than *; Upgrade siemens tim_4r-ie_dnp3_firmware to a higher version than *