Errata overview
Errata ID 331
Date 2016-11-23
Source package ntp
Fixed in version 1:4.2.6.p5+dfsg-2.63.201611102010
Description
This update addresses the following issue(s):
* incorrect handling of crypto NAK packets my result in denial of service
  (CVE-2016-1547)
* Change the time of an ntpd client or deny service to an ntpd client by
  forcing it to change from basic client/server mode to interleaved
  symmetric mode (CVE-2016-1548)
* Timing attack for authenticated packets (CVE-2016-1550)
* Duplicate IPs on unconfig directives will cause an assertion failure
  (CVE-2016-2516)
* Crafted addpeer with hmode > 7 causes out-of-bounds reference
  (CVE-2016-2518)
Additional notes
CVE ID CVE-2016-1547
CVE-2016-1548
CVE-2016-1550
CVE-2016-2516
CVE-2016-2518
UCS Bug number #40770