Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2016-7426

ntp: Client rate limiting and server responses

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.

CVSS 3.1 · 7.5 High EPSS 12.4% KEV · Not listed
Vendors
Canonical Hpe Ntp and 1 more
Products
Ubuntu Linux Hpux-ntp Ntp and 7 more
CVE-2016-7434

ntp: read_mru_list() does inadequate incoming packet checks

The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.

CVSS 3.1 · 7.5 High EPSS 53.1% KEV · Not listed
Vendors
Hpe Ntp
Products
Hpux-ntp Ntp
CVE-2017-6458

ntp: Potential Overflows in ctl_put() functions

Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.

CVSS 3.1 · 8.8 High EPSS 6.5% KEV · Not listed
Vendors
Apple Hpe Ntp and 1 more
Products
Mac Os X Hpux-ntp Ntp and 2 more
CVE-2018-7170

ntp: Ephemeral association time spoofing additional protection

ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.

CVSS 3.1 · 5.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Hpe Netapp Ntp and 1 more
Products
Hpux-ntp Hci Solidfire and 7 more
CVE-2018-7185

ntp: Unauthenticated packet can reset authenticated interleaved association

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.

CVSS 3.1 · 7.5 High EPSS 9.0% KEV · Not listed
Vendors
Canonical Hpe Netapp and 3 more
Products
Ubuntu Linux Hpux-ntp Hci and 20 more
CVE-2016-9042

ntp: DoS via origin timestamp check functionality

An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.

CVSS 3.1 · 5.9 Medium EPSS 3.8% KEV · Not listed
Vendors
Freebsd Hpe Ntp and 1 more
Products
Freebsd Hpux-ntp Ntp and 2 more