Bug#833442: busybox: CVE-2016-6301: NTP server denial of service flaw

[Salvatore Bonaccorso <carnil@debian.org>]

Source: busybox
Version: 1:1.22.0-9
Severity: normal
Tags: security upstream patch

Hi,

the following vulnerability was published for busybox. The config
CONFIG_NTPD is not enabled by default, so this only would affect
rebuild packages. It is thus marked unimportant in the
security-tracker. Opened the bug to track the issue in BTS.

CVE-2016-6301[0]:
NTP server denial of service flaw

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-6301

Regards,
Salvatore