NTP BUG 1593: ntpd abort in free() with logconfig syntax error
Last update: June 28, 2022 20:06 UTC (57417e17c)
Summary
Description
If ntpd
is not built with OpenSSL cryptography and ntpd
is told to configure cryptography statistics, ntpd
will crash.
Mitigation
- Don’t specify cryptography statistics directives in unpatched releases of
ntpd
if your ntpd
doesn’t support cryptography.
- Upgrade to 4.2.8p4 or later.
- Monitor your
ntpd
instances.
Credit
This issue was discovered and fixed by Dave Hart in 2010.