[ntp:security] [Bug 1331] DoS with mode 7 packets (CVE-2009-3563)

Harlan Stenn via the NTP Bugzilla bugzilla at ntp.org
Thu Oct 22 06:05:11 UTC 2009


Additional Comments From stenn at ntp.org (Harlan Stenn)
Submitted on 2009-10-22 06:05

I sent the patch to CERT and they are alerting the vendors.  We also have a VU
number from them.

CERT prefers to have at least 45 days' time for vendors to apply the patch and
test it.  They have asked us if Tuesday 8 December is an acceptable "announce"
date.  That seems fine with me, anybody disagree?

Harlan Stenn <stenn at ntp.org>

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

More information about the security mailing list