Drop Incoming ICMPv4 Timestamp Requests
ICMP Timestamp requests reveal information about the system and can be used to determine which operating system is installed. Precise time data can also be used to launch time based attacks against the system. Configuring the system to drop incoming ICMPv4 timestamp requests mitigates these risks.
[no/yes]
To check if the system is configured to process ICMP timestamp requests, run the following command:
sysctl net.inet.icmp.timestamp
If the value is not set to '0', this is a finding.
oval:org.secpod.oval:def:44295
SCAP Repo OVAL Definition
2018-02-21