{"id":"CVE-2013-5211","aliases":["DEBIAN-CVE-2013-5211","EUVD-2013-5051","GHSA-2q29-vhpq-hpv3","MGASA-2014-0032","SUSE-SU-2015:0259-1","SUSE-SU-2015:0259-3","SUSE-SU-2015:1173-1","openSUSE-SU-2024:10181-1"],"status":"published","title":"The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to...","description":"The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.97549,"percentile":0.99902,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-20"],"published":"2014-01-02T11:00:00Z","modified":"2026-08-04T06:03:46Z","exploits":[{"source":"exploitdb","id":"EDB-33073","title":"NTP ntpd monlist Query Reflection - Denial of Service","type":"dos","platform":"linux","date":"2014-04-28","url":"https://www.exploit-db.com/exploits/33073"},{"source":"pocgithub","id":"dani87/ntpscanner","title":"dani87/ntpscanner","date":"2014-09-07","url":"https://github.com/dani87/ntpscanner"},{"source":"pocgithub","id":"suedadam/ntpscanner","title":"suedadam/ntpscanner","date":"2014-12-14","url":"https://github.com/suedadam/ntpscanner"},{"source":"pocgithub","id":"sepehrdaddev/ntpdos","title":"sepehrdaddev/ntpdos","date":"2019-09-24","url":"https://github.com/sepehrdaddev/ntpdos"},{"source":"pocgithub","id":"0xhav0c/CVE-2013-5211","title":"0xhav0c/CVE-2013-5211","date":"2023-05-03","url":"https://github.com/0xhav0c/CVE-2013-5211"},{"source":"pocgithub","id":"requiempentest/NTP_CVE-2013-5211","title":"requiempentest/NTP_CVE-2013-5211","date":"2024-10-16","url":"https://github.com/requiempentest/NTP_CVE-2013-5211"},{"source":"metasploit","id":"auxiliary/scanner/ntp/ntp_peer_list_dos","title":"NTP Mode 7 PEER_LIST DoS Scanner","type":"auxiliary","date":"2014-08-25","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/ntp/ntp_peer_list_dos"},{"source":"metasploit","id":"auxiliary/scanner/ntp/ntp_peer_list_sum_dos","title":"NTP Mode 7 PEER_LIST_SUM DoS Scanner","type":"auxiliary","date":"2014-08-25","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/ntp/ntp_peer_list_sum_dos"},{"source":"metasploit","id":"auxiliary/scanner/ntp/ntp_req_nonce_dos","title":"NTP Mode 6 REQ_NONCE DRDoS Scanner","type":"auxiliary","date":"2014-08-25","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/ntp/ntp_req_nonce_dos"},{"source":"metasploit","id":"auxiliary/scanner/ntp/ntp_reslist_dos","title":"NTP Mode 7 GET_RESTRICT DRDoS Scanner","type":"auxiliary","date":"2014-08-25","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/ntp/ntp_reslist_dos"},{"source":"metasploit","id":"auxiliary/scanner/ntp/ntp_unsettrap_dos","title":"NTP Mode 6 UNSETTRAP DRDoS Scanner","type":"auxiliary","date":"2014-08-25","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/ntp/ntp_unsettrap_dos"},{"source":"metasploit","id":"auxiliary/scanner/ntp/ntp_monlist","title":"NTP Monitor List Scanner","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/ntp/ntp_monlist"},{"source":"metasploit","id":"auxiliary/scanner/ntp/ntp_readvar","title":"NTP Clock Variables Disclosure","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/ntp/ntp_readvar"},{"source":"metasploit","id":"auxiliary/scanner/portmap/portmap_amp","title":"Portmapper Amplification Scanner","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/portmap/portmap_amp"},{"source":"metasploit","id":"auxiliary/scanner/udp/udp_amplification","title":"UDP Amplification Scanner","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/udp/udp_amplification"},{"source":"metasploit","id":"auxiliary/scanner/upnp/ssdp_amp","title":"SSDP ssdp:all M-SEARCH Amplification Scanner","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/upnp/ssdp_amp"}],"fixes":[{"ecosystem":"Debian:11","package":"ntp","fixed_in":["1:4.2.8p3+dfsg-1"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"ntp","fixed_in":["4.2.6p5-12.1.mga3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:11","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.8p3+dfsg-1"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6p5-12.1.mga3"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p9-1.1"}]}],"bundled":60}],"products":[{"vendor":"ntp","product":"ntp"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"oracle","product":"linux"}],"references":[{"url":"http://secunia.com/advisories/59288","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04790232","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-09/msg00031.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=138971294629419\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","Mailing List","article"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA14-013A","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"http://www.securityfocus.com/bid/64692","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"http://www.kb.cert.org/vuls/id/348126","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144182594518755\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://openwall.com/lists/oss-security/2013/12/30/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article"]},{"url":"http://secunia.com/advisories/59726","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","advisory"]},{"url":"http://www.securitytracker.com/id/1030433","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-dev/ntp-dev-4.2.7p26.tar.gz","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-14-051-04","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource","advisory"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/ntp_advisory.asc","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095861","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","web"]},{"url":"http://lists.ntp.org/pipermail/pool/2011-December/005616.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Broken Link","web"]},{"url":"http://openwall.com/lists/oss-security/2013/12/30/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","article"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095892","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","web"]},{"url":"http://bugs.ntp.org/show_bug.cgi?id=1532","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"https://puppet.com/security/cve/puppetlabs-ntp-nov-2015-advisory","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5211"},{"url":"https://github.com/advisories/GHSA-2q29-vhpq-hpv3"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-5211","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0032.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12326","tags":["report"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#DRDoS_Amplification_Attack_using","tags":["web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00005.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150259-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/838458","tags":["report"]},{"url":"https://bugzilla.suse.com/857195","tags":["report"]},{"url":"https://bugzilla.suse.com/883859","tags":["report"]},{"url":"https://bugzilla.suse.com/887957","tags":["report"]},{"url":"https://bugzilla.suse.com/910764","tags":["report"]},{"url":"https://bugzilla.suse.com/911792","tags":["report"]},{"url":"https://bugzilla.suse.com/924202","tags":["report"]},{"url":"https://bugzilla.suse.com/928321","tags":["report"]},{"url":"https://bugzilla.suse.com/935409","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3405","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150259-3/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/611513","tags":["report"]},{"url":"https://bugzilla.suse.com/645356","tags":["report"]},{"url":"https://bugzilla.suse.com/656345","tags":["report"]},{"url":"https://bugzilla.suse.com/680301","tags":["report"]},{"url":"https://bugzilla.suse.com/692969","tags":["report"]},{"url":"https://bugzilla.suse.com/730374","tags":["report"]},{"url":"https://bugzilla.suse.com/734467","tags":["report"]},{"url":"https://bugzilla.suse.com/758253","tags":["report"]},{"url":"https://bugzilla.suse.com/771480","tags":["report"]},{"url":"https://bugzilla.suse.com/817893","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151173-1/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9311","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-5211","description":"The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.","status":"published","published":"2014-01-02T11:00:00Z","modified":"2024-08-06T17:06:52.374Z","updated_at":"2026-11-02T14:34:55.825574Z"}],"euvd":[{"id":"EUVD-2013-5051","description":"The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.","status":"published","published":"2014-01-02T11:00:00Z","modified":"2024-08-06T17:06:52Z","updated_at":"2026-11-03T01:56:29.587006Z"}],"ghsa":[{"id":"GHSA-2q29-vhpq-hpv3","title":"The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to...","description":"The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.","status":"published","published":"2022-05-14T02:11:38Z","modified":"2023-02-02T05:05:05Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:52:01.503631Z"}],"nvd":[{"id":"CVE-2013-5211","description":"The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.","status":"published","published":"2014-01-02T14:59:03.47Z","modified":"2026-06-16T23:58:31.1Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:48.062712Z"}],"osv":[{"id":"CVE-2013-5211","description":"The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.","status":"published","published":"2014-01-02T14:59:03Z","modified":"2026-04-16T06:18:48.36297454Z","updated_at":"2026-11-02T15:43:59.09154Z"},{"id":"DEBIAN-CVE-2013-5211","description":"The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.","status":"published","published":"2014-01-02T14:59:03.47Z","modified":"2026-08-04T06:03:46.254414733Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"MGASA-2014-0032","title":"Updated ntp packages work around security vulnerability","description":"The \"monlist\" command of the NTP protocol is currently abused in a DDoS\nreflection attack. This is done by spoofing packets from addresses to\nwhich the attack is directed to. The ntp installations itself are not\ntarget of the attack, but they are part of the DDoS network which the\nattacker is driving (CVE-2013-5211).\n\n** IMPORTANT **\n\nNote: the workaround for this issue is not a change in the software, but\ninstead is a change in the default configuration.  In most cases, the\nconfiguration change will need to be made manually by administrators in\nthe /etc/ntp.conf file, as the package will only install the updated\nconfiguration as /etc/ntp.conf.rpmnew. The following lines should be added\nto the end of /etc/ntp.conf:\n\n# Permit time synchronization with our time source, but do not\n# permit the source to query or modify the service on this system.\nrestrict default nomodify notrap nopeer noquery\n","status":"published","published":"2014-01-31T16:44:56Z","modified":"2026-04-16T06:25:56.014890133Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10181-1","title":"ntp-4.2.8p9-1.1 on GA media","description":"These are all security issues fixed in the ntp-4.2.8p9-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:21:26.696395Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2015:0259-1","title":"Recommended update for ntp","description":"\nThis update for ntp provides the following fixes:\n\n    * Respect NTPD_FORCE_SYNC_ON_STARTUP also for dynamic peers.\n      (bnc#887957)\n    * Fix orphan mode. (bnc#883859)\n\n","status":"published","published":"2014-11-18T12:31:05Z","modified":"2025-05-02T04:03:59.725525Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0259-3","title":"Security update for ntp","description":"\nThe NTP time service could have been used for remote denial of service \namplification attacks.\n\nThis issue can be fixed by the administrator as we described in our \nsecurity advisory SUSE-SA:2014:001\n\nhttp://lists.opensuse.org/opensuse-security-announce/2014-01/msg00005.html\n\u003chttp://lists.opensuse.org/opensuse-security-announce/2014-01/msg00005.html\u003e\n\nand on\n\nhttp://support.novell.com/security/cve/CVE-2013-5211.html\n\u003chttp://support.novell.com/security/cve/CVE-2013-5211.html\u003e\n\nthis update now also replaces the default ntp.conf template to fix this \nproblem.\n\nPlease note that if you have touched or modified ntp.conf yourself, it will \nnot be automatically fixed, you need to merge the changes manually as \ndescribed.\n\nAdditionally the following bug has been fixed:\n\n    * ntp start script does not update /var/lib/ntp/etc/localtime file if\n      /etc/localtime is symlink (bnc#838458)\n\nSecurity Issues:\n\n    * CVE-2013-5211\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211\u003e\n\n","status":"published","published":"2014-07-21T14:05:24Z","modified":"2026-02-04T03:48:05.752255Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1173-1","title":"Recommended update for ntp","description":"\nThis update for ntp provides the following fixes:\n\n    * Respect NTPD_FORCE_SYNC_ON_STARTUP also for dynamic peers.\n      (bnc#887957)\n    * Fix orphan mode. (bnc#883859)\n\n","status":"published","published":"2014-11-18T12:31:05Z","modified":"2025-05-02T04:03:59.848835Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}