● CVE — High
CVE-2020-11868
Vendordebian, redhat, netapp, ntp, opensuseProductdebian linux, enterprise linux, clustered data ontap, ntp, leap, vasa provider for clustered data ontap, virtual storage console, solidfire, hci management node, data ontap, all flash fabric-attached storage a400 firmware, fabric-attached storage 8300 firmware, fabric-attached storage 8700 firmware, all flash fabric-attached storage 8300 firmware, all flash fabric-attached storage 8700 firmware, fabric-attached storage a400 firmware, hci storage node firmwareDiscoveredApr 17, 2020UpdatedMay 5, 2025
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp.