CVE ID:	CVE-2016-9042
Description:	An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
Test IDs:	1.3.6.1.4.1.25623.1.0.106996
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9042 BugTraq ID: 97046 http://www.securityfocus.com/bid/97046 Bugtraq: 20170412 FreeBSD Security Advisory FreeBSD-SA-17:03.ntp (Google Search) http://www.securityfocus.com/archive/1/540403/100/0/threaded Bugtraq: 20170412 FreeBSD Security Advisory FreeBSD-SA-17:03.ntp (Google Search) http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded Bugtraq: 20170422 [slackware-security] ntp (SSA:2017-112-02) (Google Search) http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/ FreeBSD Security Advisory: FreeBSD-SA-17:03 https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc http://seclists.org/fulldisclosure/2017/Sep/62 http://seclists.org/fulldisclosure/2017/Nov/7 http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11 https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260 http://www.securitytracker.com/id/1038123 http://www.securitytracker.com/id/1039427 http://www.ubuntu.com/usn/USN-3349-1