CVE-2020-13817
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of...
5.9 MediumFix available
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
3.36%Up 1.1 points since Apr 14, 2021
What each source reports
CVE List
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.
- Record
CVE-2020-13817- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H - CVSS 3.0
- 5.9 Medium
CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N - Weakness
- CWE-330
- Updated
- 2026-11-02
EUVDEUVD-2020-6032
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.
- Record
EUVD-2020-6032- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-fx6x-7xgx-2wwp
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of...
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.
- Record
GHSA-fx6x-7xgx-2wwp- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H - Weakness
- CWE-20, CWE-330
- Updated
- 2026-11-02
NVD
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.
- Record
CVE-2020-13817- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H - CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:P - Weakness
- CWE-330
- Updated
- 2026-11-02
OSV
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.
- Record
CVE-2020-13817- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-13817
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.
- Record
DEBIAN-CVE-2020-13817- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
Show 10 moreShow less
OSVRHSA-2020:2663
Red Hat Security Advisory: ntp security update
- Record
RHSA-2020:2663- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-13817
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.
- Record
UBUNTU-CVE-2020-13817- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H - CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2024-1735122554 No score
ntp: Fix of CVE-2020-13817
- CVE-2020-13817: randomize transmit timestamp in client requests
- Record
CLSA-2024-1735122554- Updated
- 2026-11-02
OSVCLSA-2024-1735128099 No score
ntp: Fix of CVE-2020-13817
- CVE-2020-13817: randomize transmit timestamp in client requests
- Record
CLSA-2024-1735128099- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0934-1 No score
Security update for ntp
This update for ntp fixes the following issues:
ntp was updated to 4.2.8p15
- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740).
- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed mode 3 and mode 5 packets (bsc#1171355).
- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).
- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).
- Removed an OpenSSL version warning (bsc#992038 and bsc#1125401).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:0934-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1007-1 No score
Security update for ntp
This update for ntp fixes the following issues:
ntp was updated to 4.2.8p15
- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740).
- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed mode 3 and mode 5 packets (bsc#1171355).
- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).
- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).
- Removed an OpenSSL version warning (bsc#992038 and bsc#1125401).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:1007-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11102-1 No score
ntp-4.2.8p15-7.2 on GA media
These are all security issues fixed in the ntp-4.2.8p15-7.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11102-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:14415-1 No score
Security update for ntp
This update for ntp fixes the following issues:
ntp was updated to 4.2.8p15
- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740).
- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed mode 3 and mode 5 packets (bsc#1171355).
- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).
- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).
- Record
SUSE-SU-2020:14415-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:1805-1 No score
Security update for ntp
This update for ntp fixes the following issues:
ntp was updated to 4.2.8p15
- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740).
- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed mode 3 and mode 5 packets (bsc#1171355).
- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).
- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).
- Record
SUSE-SU-2020:1805-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:1823-1 No score
Security update for ntp
This update for ntp fixes the following issues:
ntp was updated to 4.2.8p15
- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740).
- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed mode 3 and mode 5 packets (bsc#1171355).
- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).
- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).
- Removed an OpenSSL version warning (bsc#992038 and bsc#1125401).
- Record
SUSE-SU-2020:1823-1- Updated
- 2026-11-02
Affected products
- ntp
- fujitsu m10-1 firmware
- fujitsu m10-4 firmware
- fujitsu m10-4s firmware
- fujitsu m12-1 firmware
- fujitsu m12-2 firmware
- fujitsu m12-2s firmware
- netapp cloud backup
- netapp clustered data ontap
- netapp data ontap
- netapp element software
- netapp h300e firmware
Show 13 moreShow less
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ntpTuxCare:CentOS:6 |
before 4.2.6p5-16.el6.tuxcare.els1 | 4.2.6p5-16.el6.tuxcare.els1 |
ntp-docTuxCare:CentOS:6 |
before 4.2.6p5-16.el6.tuxcare.els1 | 4.2.6p5-16.el6.tuxcare.els1 |
ntp-perlTuxCare:CentOS:6 |
before 4.2.6p5-16.el6.tuxcare.els1 | 4.2.6p5-16.el6.tuxcare.els1 |
ntpdateTuxCare:CentOS:6 |
before 4.2.6p5-16.el6.tuxcare.els1 | 4.2.6p5-16.el6.tuxcare.els1 |
ntpTuxCare:OracleLinux:6 |
before 4.2.6p5-16.el6.tuxcare.els1 | 4.2.6p5-16.el6.tuxcare.els1 |
ntp-docTuxCare:OracleLinux:6 |
before 4.2.6p5-16.el6.tuxcare.els1 | 4.2.6p5-16.el6.tuxcare.els1 |
ntp-perlTuxCare:OracleLinux:6 |
before 4.2.6p5-16.el6.tuxcare.els1 | 4.2.6p5-16.el6.tuxcare.els1 |
ntpdateTuxCare:OracleLinux:6 |
before 4.2.6p5-16.el6.tuxcare.els1 | 4.2.6p5-16.el6.tuxcare.els1 |
ntpDebian:11 |
before 1:4.2.8p14+dfsg-1 | 1:4.2.8p14+dfsg-1 |
ntpRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
Show 51 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ntp-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntpdateRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntp-docRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntp-perlRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
sntpRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntpRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntp-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntpdateRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntp-docRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntp-perlRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
sntpRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntpRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntp-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntpdateRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntp-docRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntp-perlRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
sntpRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntpRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntp-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntpdateRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntp-docRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntp-perlRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
sntpRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.2.6p5-29.el7_8.2 | 0:4.2.6p5-29.el7_8.2 |
ntpSUSE:Linux Enterprise Server 11 SP4-LTSS From an advisory covering 4 CVEs |
before 4.2.8p15-64.16.1 | 4.2.8p15-64.16.1 |
ntpSUSE:HPE Helion OpenStack 8 From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:OpenStack Cloud 7 From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:OpenStack Cloud 8 From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Enterprise Storage 5 From an advisory covering 4 CVEs |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Module for Legacy 15 SP1 From an advisory covering 4 CVEs |
before 4.2.8p15-4.10.1 | 4.2.8p15-4.10.1 |
ntpSUSE:Linux Enterprise Module for Legacy 15 SP2 From an advisory covering 4 CVEs |
before 4.2.8p15-4.10.1 | 4.2.8p15-4.10.1 |
ntpSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 4 CVEs |
before 4.2.8p15-4.10.1 | 4.2.8p15-4.10.1 |
ntpSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 4 CVEs |
before 4.2.8p15-4.10.1 | 4.2.8p15-4.10.1 |
ntpUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1:4.2.6.p5+dfsg-3ubuntu21:4.2.6.p5+dfsg-3ubuntu2.14.04.11:4.2.6.p5+dfsg-3ubuntu2.14.04.21:4.2.6.p5+dfsg-3ubuntu2.14.04.31:4.2.6.p5+dfsg-3ubuntu2.14.04.5 Show 8 moreShow less1:4.2.6.p5+dfsg-3ubuntu2.14.04.61:4.2.6.p5+dfsg-3ubuntu2.14.04.71:4.2.6.p5+dfsg-3ubuntu2.14.04.81:4.2.6.p5+dfsg-3ubuntu2.14.04.101:4.2.6.p5+dfsg-3ubuntu2.14.04.111:4.2.6.p5+dfsg-3ubuntu2.14.04.121:4.2.6.p5+dfsg-3ubuntu2.14.04.131:4.2.6.p5+dfsg-3ubuntu2.14.04.13+esm1 |
None known |
ntpUbuntu:16.04:LTS |
All versions, plus listed versions 1:4.2.6.p5+dfsg-3ubuntu81:4.2.6.p5+dfsg-3ubuntu8.11:4.2.6.p5+dfsg-3ubuntu91:4.2.8p4+dfsg-3ubuntu11:4.2.8p4+dfsg-3ubuntu2 Show 13 moreShow less1:4.2.8p4+dfsg-3ubuntu31:4.2.8p4+dfsg-3ubuntu41:4.2.8p4+dfsg-3ubuntu51:4.2.8p4+dfsg-3ubuntu5.11:4.2.8p4+dfsg-3ubuntu5.21:4.2.8p4+dfsg-3ubuntu5.31:4.2.8p4+dfsg-3ubuntu5.41:4.2.8p4+dfsg-3ubuntu5.51:4.2.8p4+dfsg-3ubuntu5.61:4.2.8p4+dfsg-3ubuntu5.71:4.2.8p4+dfsg-3ubuntu5.81:4.2.8p4+dfsg-3ubuntu5.91:4.2.8p4+dfsg-3ubuntu5.10 |
None known |
ntpUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1:4.2.8p10+dfsg-5ubuntu31:4.2.8p10+dfsg-5ubuntu41:4.2.8p10+dfsg-5ubuntu51:4.2.8p10+dfsg-5ubuntu61:4.2.8p10+dfsg-5ubuntu7 Show 7 moreShow less1:4.2.8p10+dfsg-5ubuntu7.11:4.2.8p10+dfsg-5ubuntu7.1+esm11:4.2.8p10+dfsg-5ubuntu7.1+esm21:4.2.8p10+dfsg-5ubuntu7.21:4.2.8p10+dfsg-5ubuntu7.2+esm11:4.2.8p10+dfsg-5ubuntu7.31:4.2.8p10+dfsg-5ubuntu7.3+esm1 |
None known |
ntpUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1:4.2.8p12+dfsg-3ubuntu21:4.2.8p12+dfsg-3ubuntu31:4.2.8p12+dfsg-3ubuntu41:4.2.8p12+dfsg-3ubuntu4.20.04.11:4.2.8p12+dfsg-3ubuntu4.20.04.1+esm1 |
None known |
ntpUbuntu:22.04:LTS |
All versions, plus listed versions 1:4.2.8p12+dfsg-3ubuntu61:4.2.8p15+dfsg-1ubuntu11:4.2.8p15+dfsg-1ubuntu2 |
None known |
ntpopenSUSE:Leap 15.1 From an advisory covering 4 CVEs |
before 4.2.8p15-lp151.2.3.1 | 4.2.8p15-lp151.2.3.1 |
ntpopenSUSE:Leap 15.2 From an advisory covering 4 CVEs |
before 4.2.8p15-lp152.3.3.1 | 4.2.8p15-lp152.3.3.1 |
ntpopenSUSE:Tumbleweed From an advisory covering 18 CVEs |
before 4.2.8p15-7.2 | 4.2.8p15-7.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-13817 is a medium vulnerability (CVSS 5.9) in Ntp, published June 4, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.36%, the 88th percentile. Fixed in ntp 4.2.6p5-16.el6.tuxcare.els1.
References
lists.opensuse.org/opensuse-security-announce/2020-07/msg00005.html
security.gentoo.org/glsa/202007-12
oracle.com/security-alerts/cpujan2022.html
support.ntp.org/bin/view/Main/NtpBug3596
bugs.ntp.org/show_bug.cgi?id=3596
Show 47 moreShow less
security.netapp.com/advisory/ntap-20200625-0004
nvd.nist.gov/vuln/detail/CVE-2020-13817
github.com/advisories/GHSA-fx6x-7xgx-2wwp
errata.cloudlinux.com/els6/CLSA-2024-1735122554.html
security-tracker.debian.org/tracker/CVE-2020-13817
access.redhat.com/errata/RHSA-2020:2663
bugzilla.redhat.com/show_bug.cgi?id=1716665
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2663.json
cve.org/CVERecord?id=CVE-2020-11868
suse.com/support/update/announcement/2020/suse-su-202014415-1
bugzilla.suse.com/1169740
ubuntu.com/security/CVE-2020-13817