RHSA-2020:2663 — Security Advisory
Red Hat Security Advisory: ntp security update
Severity
ModerateRed Hat Product Security
Products
Official CSAF product identity
Published · June 23, 2020
Updated · June 25, 2026
Topic
An update for ntp is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The Network Time Protocol (NTP) is used to synchronize a computer's time with another referenced time source. These packages include the ntpd service which continuously adjusts system time and utilities used to query and configure the ntpd service.
Security Fix(es):
-
ntp: ntpd using highly predictable transmit timestamps could result in time change or DoS (CVE-2020-13817)
-
ntp: DoS on client ntpd using server mode packet (CVE-2020-11868)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.