PVE:ICMP Timestamp Request Remote Date Disclosure

[anonox]

Hi,
Security scans on PVE Server show the issue with ICMP timestamp request.
It say:The remote host answers to an ICMP timestamp request. This allows an attacker to know the date that is set on the targeted machine, which may assist an unauthenticated, remote attacker in defeating time-based authentication protocols.

What should I do?, please tell me.Thank you.

 

[dagservice]

Use your firewall to block ICMP for the network in question?

 

[stv.Bundesadmin]

Use your firewall to block ICMP for the network in question?

PVE/PBS should only be NTP-Client by default and not NTP server.

 

[anonox]

Hi,
Look like the https://www.tenable.com/plugins/nessus/10114

References:

CVE	CVE-1999-0524
XREF	CWE:200