CVE:CVE-2016-4957
CNNVD:CNNVD-201606-049
ntpd（Network Time Protocol daemon）是一个操作系统守护进程，它使用网络时间协议（NTP）与时间服务器的系统时间保持同步。
NTP 4.2.8p8之前版本的ntpd中存在拒绝服务漏洞。远程攻击者可通过发送特制的crypto-NAK数据包利用该漏洞造成拒绝服务（守护进程崩溃）。（注：该漏洞由于CNNVD-201604-602补丁的不完全修复存在）
solution:Upgrade ntp ntp to a higher version than 4.2.8:p7,4.3.92,and avoid the version 4.2.8:p7,4.3.92; Upgrade oracle solaris to a higher version than 10,11.3,and avoid the version 10,11.3; Upgrade suse manager_proxy to a higher version than 2.1,and avoid the version 2.1; Upgrade suse openstack_cloud to a higher version than 5,and avoid the version 5; Upgrade novell suse_manager to a higher version than 2.1,and avoid the version 2.1; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2; Upgrade suse linux_enterprise_desktop to a higher version than 12:sp1,and avoid the version 12:sp1; Upgrade suse linux_enterprise_server to a higher version than 11:sp2,11:sp3,11:sp4,12:sp1,and avoid the version 11:sp2,11:sp3,11:sp4,12:sp1