vulnerability

Amazon Linux AMI 2: CVE-2016-7433: Security patch for ntp (ALAS-2018-1009)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Jan 13, 2017
Added
Apr 27, 2020
Modified
May 5, 2025

Description

NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."

Solutions

amazon-linux-ami-2-upgrade-ntpamazon-linux-ami-2-upgrade-ntp-debuginfoamazon-linux-ami-2-upgrade-ntp-docamazon-linux-ami-2-upgrade-ntp-perlamazon-linux-ami-2-upgrade-ntpdateamazon-linux-ami-2-upgrade-sntp
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.