The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6301
