NTP BUG 3102: Zero Origin timestamp regression
Last update: April 22, 2024 18:49 UTC (7e7bd5857)
Summary
Description
Zero Origin timestamp problems were fixed by Bug 2945 in ntp-4.2.8p6. However, subsequent timestamp validation checks introduced a regression in the handling of some Zero origin timestamp checks.
Mitigation
- Implement BCP-38.
- Upgrade to 4.2.8p9 or later.
- Properly monitor your
ntpd
instances, and auto-restart ntpd
(without -g
) if it stops running.
Credit
This weakness was discovered by Sharon Goldberg and Aanchal Malhotra of Boston University.
Timeline