Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2016-2518

ntp: out-of-bounds references on crafted packet

The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.

CVSS 3.1 · 5.3 Medium EPSS 15.1% KEV · Not listed
Vendors
Debian Freebsd Netapp and 4 more
Products
Debian Linux Freebsd Clustered Data Ontap and 17 more
CVE-2017-6458

ntp: Potential Overflows in ctl_put() functions

Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.

CVSS 3.1 · 8.8 High EPSS 6.5% KEV · Not listed
Vendors
Apple Hpe Ntp and 1 more
Products
Mac Os X Hpux-ntp Ntp and 2 more
CVE-2016-4954

ntp: partial processing of spoofed packets

The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.

CVSS 3.1 · 7.5 High EPSS 13.3% KEV · Not listed
Vendors
Ntp Opensuse Oracle and 2 more
Products
Ntp Leap Opensuse and 12 more
CVE-2016-4956

ntp: broadcast interleave (incomplete fix for CVE-2016-1548)

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.

CVSS 3.1 · 5.3 Medium EPSS 16.4% KEV · Not listed
Vendors
Novell Ntp Opensuse and 3 more
Products
Suse Manager Ntp Leap and 8 more
CVE-2016-4955

ntp: autokey association reset

ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.

CVSS 3.1 · 5.9 Medium EPSS 8.8% KEV · Not listed
Vendors
Novell Ntp Opensuse and 3 more
Products
Suse Manager Ntp Leap and 8 more
CVE-2016-4953

ntp: bad authentication demobilizes ephemeral associations

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.

CVSS 3.1 · 7.5 High EPSS 17.2% KEV · Not listed
Vendors
Ntp Opensuse Oracle and 2 more
Products
Ntp Leap Opensuse and 12 more
CVE-2016-9042

ntp: DoS via origin timestamp check functionality

An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.

CVSS 3.1 · 5.9 Medium EPSS 3.9% KEV · Not listed
Vendors
Freebsd Hpe Ntp and 1 more
Products
Freebsd Hpux-ntp Ntp and 2 more