NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive. https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-6464