LEAP Second Security Vulnerability - Urgent - Attention please answer ASAP.

[Paul11]

When do LEAP Second Security Vulnerability will happen again in end of December 2016???

Is Vulnerability or 2015 002 or any Leap Second going to happen end of this December 2016???

[Vellachery__Sum]

Paul,

EXOS switches prior to 16.2 are vulnerable to a kernel deadlock due to the leap second, if NTP is enabled. SNTP is not affected. NTP advertises the leap second for 24 hours prior to the leap second occurring, so the workaround is to disable NTP at least 24 hours before the leap second.


EXOS 16.2 and EXOS 21.1 are not affected by this. Please see the following GTAC Knowledge article for further information:-



https://gtacknowledge.extremenetworks.com/articles/Q_A/Are-Extreme-Networks-products-vulnerable-to-V...

[Paul11]

Hi Ronald,

please could you provide more information. So that i can update my client on this. thanks a lot.

[Ronald_Dvorak]

No

[Paul11]

Hi Korsovsky,

thanks. my question is will it be happen in this end of December 2016???

[Korsovsky__Kons]

Hi Paul,
would you check if following articles answer you questions?
Are products affected?
Script to apply workaround.

Kind regards,
Konstantin