Every CVE Search/ Get API key

CVE-2018-12327

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to...

9.8 CriticalPublic exploitFix available

CVE-2018-12327 is a critical vulnerability (CVSS 9.8) in Ntp, published June 20, 2018. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 27.5%, the 98th percentile. Fixed in ntp 1:4.2.8p10+dfsg-5ubuntu7.3+tuxcare.els1.

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

27.5%Up 13.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.

Record
CVE-2018-12327
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.

Record
CVE-2018-12327
Updated
2026-11-02
EUVDEUVD-2018-4301 No score

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.

Record
EUVD-2018-4301
Updated
2026-11-03
GitHub AdvisoriesGHSA-gmx7-j3pp-2gxp 9.8

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to...

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.

Record
GHSA-gmx7-j3pp-2gxp
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSV 9.8

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.

Record
CVE-2018-12327
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-12327 9.8

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.

Record
DEBIAN-CVE-2018-12327
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 16 moreShow less
OSVRHSA-2018:3853 7.0

Red Hat Security Advisory: ntp security update

Record
RHSA-2018:3853
CVSS 3.0
7.0 HighCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:3854 7.0

Red Hat Security Advisory: ntp security update

Record
RHSA-2018:3854
CVSS 3.0
7.0 HighCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:2077 7.0

Red Hat Security Advisory: ntp security, bug fix, and enhancement update

Record
RHSA-2019:2077
CVSS 3.0
7.0 HighCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:1470 7.0

Red Hat Security Advisory: ntp security update

Record
RHSA-2020:1470
CVSS 3.0
7.0 HighCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-12327 9.8

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.

Record
UBUNTU-CVE-2018-12327
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2023-1699468766 No score

Fix CVE(s): CVE-2018-12327

  • SECURITY UPDATE: Arbitrary code execution vulnerability in ntpq/ntpdc
    • debian/patches/CVE-2018-12327.patch: fix stack buffer overflow in NTPQ/NTPDC.
    • CVE-2018-12327
Record
CLSA-2023-1699468766
Updated
2026-11-02
OSVMGASA-2018-0371 No score

Updated ntp packages fix security vulnerability

Updated ntp packages fix security vulnerability:

Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter (CVE-2018-12327).

Record
MGASA-2018-0371
Updated
2026-11-02
OSVopenSUSE-SU-2024:11102-1 No score

ntp-4.2.8p15-7.2 on GA media

These are all security issues fixed in the ntp-4.2.8p15-7.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11102-1
Updated
2026-11-02
OSVSUSE-SU-2018:3342-1 No score

Security update for ntp

NTP was updated to 4.2.8p12 (bsc#1111853):

  • CVE-2018-12327: Fixed stack buffer overflow in the openhost() command-line call of NTPQ/NTPDC. (bsc#1098531)
  • CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection (bsc#1083424)

Please also see https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/ for more information.

Record
SUSE-SU-2018:3342-1
Updated
2026-11-02
OSVSUSE-SU-2018:3342-2 No score

Security update for ntp

NTP was updated to 4.2.8p12 (bsc#1111853):

  • CVE-2018-12327: Fixed stack buffer overflow in the openhost() command-line call of NTPQ/NTPDC. (bsc#1098531)
  • CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection (bsc#1083424)

Please also see https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/ for more information.

Record
SUSE-SU-2018:3342-2
Updated
2026-11-02
OSVSUSE-SU-2018:3351-1 No score

Security update for ntp

NTP was updated to 4.2.8p12 (bsc#1111853):

  • CVE-2018-12327: Fixed stack buffer overflow in the openhost() command-line call of NTPQ/NTPDC. (bsc#1098531)
  • CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection (bsc#1083424)

Please also see https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/ for more information.

Record
SUSE-SU-2018:3351-1
Updated
2026-11-02
OSVSUSE-SU-2018:3352-1 No score

Security update for ntp

NTP was updated to 4.2.8p12 (bsc#1111853):

  • CVE-2018-12327: Fixed stack buffer overflow in the openhost() command-line call of NTPQ/NTPDC. (bsc#1098531)
  • CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection (bsc#1083424)

Please also see https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/ for more information.

Record
SUSE-SU-2018:3352-1
Updated
2026-11-02
OSVSUSE-SU-2018:3356-1 No score

Security update for ntp

NTP was updated to 4.2.8p12 (bsc#1111853):

  • CVE-2018-12327: Fixed stack buffer overflow in the openhost() command-line call of NTPQ/NTPDC. (bsc#1098531)
  • CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection (bsc#1083424)

Please also see https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/ for more information.

Record
SUSE-SU-2018:3356-1
Updated
2026-11-02
OSVSUSE-SU-2018:3386-1 No score

Security update for ntp

NTP was updated to 4.2.8p12 (bsc#1111853):

  • CVE-2018-12327: Fixed stack buffer overflow in the openhost() command-line call of NTPQ/NTPDC. (bsc#1098531)
  • CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection (bsc#1083424)

Please also see https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/ for more information.

Record
SUSE-SU-2018:3386-1
Updated
2026-11-02
OSVUSN-4229-1 No score

ntp vulnerability

It was discovered that ntpq and ntpdc incorrectly handled some arguments. An attacker could possibly use this issue to cause ntpq or ntpdc to crash, execute arbitrary code, or escalate to higher privileges.

Record
USN-4229-1
Updated
2026-11-02
OSVUSN-4229-2 No score

ntp vulnerability

USN-4229-1 fixed a vulnerability in NTP. This update provides the corresponding update for Ubuntu 18.04 ESM.

Original advisory details:

It was discovered that ntpq and ntpdc incorrectly handled some arguments. An attacker could possibly use this issue to cause ntpq or ntpdc to crash, execute arbitrary code, or escalate to higher privileges.

Record
USN-4229-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ntp
TuxCare:Ubuntu:18.04
 before 1:4.2.8p10+dfsg-5ubuntu7.3+tuxcare.els1
1:4.2.8p10+dfsg-5ubuntu7.3+tuxcare.els1
ntp-doc
TuxCare:Ubuntu:18.04
 before 1:4.2.8p10+dfsg-5ubuntu7.3+tuxcare.els1
1:4.2.8p10+dfsg-5ubuntu7.3+tuxcare.els1
ntpdate
TuxCare:Ubuntu:18.04
 before 1:4.2.8p10+dfsg-5ubuntu7.3+tuxcare.els1
1:4.2.8p10+dfsg-5ubuntu7.3+tuxcare.els1
sntp
TuxCare:Ubuntu:18.04
 before 1:4.2.8p10+dfsg-5ubuntu7.3+tuxcare.els1
1:4.2.8p10+dfsg-5ubuntu7.3+tuxcare.els1
ntp
Debian:11
 All versions, plus listed versions
1:4.2.8p15+dfsg-11:4.2.8p15+dfsg-2-hurd.11:4.2.8p15+dfsg-2~1.2.1+dfsg1-7+hurd.11:4.2.8p15+dfsg-2~1.2.1+dfsg1-8+hurd.11:4.2.8p15+dfsg-2~1.2.2+dfsg1-2+hurd.11:4.2.8p15+dfsg-2~hurd.1
 None known
ntp
Mageia:6
 before 4.2.8p12-1.mga6
4.2.8p12-1.mga6
ntp
Red Hat:rhel_eus:6.7::computenode
 before 0:4.2.6p5-5.el6_7.6
0:4.2.6p5-5.el6_7.6
ntp-debuginfo
Red Hat:rhel_eus:6.7::computenode
 before 0:4.2.6p5-5.el6_7.6
0:4.2.6p5-5.el6_7.6
ntpdate
Red Hat:rhel_eus:6.7::computenode
 before 0:4.2.6p5-5.el6_7.6
0:4.2.6p5-5.el6_7.6
ntp-doc
Red Hat:rhel_eus:6.7::computenode
 before 0:4.2.6p5-5.el6_7.6
0:4.2.6p5-5.el6_7.6
Show 83 moreShow less
Affected packages
PackageAffectedFixed
ntp-perl
Red Hat:rhel_eus:6.7::computenode
 before 0:4.2.6p5-5.el6_7.6
0:4.2.6p5-5.el6_7.6
ntp
Red Hat:rhel_eus:6.7::server
 before 0:4.2.6p5-5.el6_7.6
0:4.2.6p5-5.el6_7.6
ntp-debuginfo
Red Hat:rhel_eus:6.7::server
 before 0:4.2.6p5-5.el6_7.6
0:4.2.6p5-5.el6_7.6
ntpdate
Red Hat:rhel_eus:6.7::server
 before 0:4.2.6p5-5.el6_7.6
0:4.2.6p5-5.el6_7.6
ntp-doc
Red Hat:rhel_eus:6.7::server
 before 0:4.2.6p5-5.el6_7.6
0:4.2.6p5-5.el6_7.6
ntp-perl
Red Hat:rhel_eus:6.7::server
 before 0:4.2.6p5-5.el6_7.6
0:4.2.6p5-5.el6_7.6
ntp
Red Hat:enterprise_linux:6::client
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntpdate
Red Hat:enterprise_linux:6::client
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp-doc
Red Hat:enterprise_linux:6::client
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp-perl
Red Hat:enterprise_linux:6::client
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp
Red Hat:enterprise_linux:6::computenode
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntpdate
Red Hat:enterprise_linux:6::computenode
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp-doc
Red Hat:enterprise_linux:6::computenode
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp-perl
Red Hat:enterprise_linux:6::computenode
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp
Red Hat:enterprise_linux:6::server
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntpdate
Red Hat:enterprise_linux:6::server
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp-doc
Red Hat:enterprise_linux:6::server
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp-perl
Red Hat:enterprise_linux:6::server
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp
Red Hat:enterprise_linux:6::workstation
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntpdate
Red Hat:enterprise_linux:6::workstation
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp-doc
Red Hat:enterprise_linux:6::workstation
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp-perl
Red Hat:enterprise_linux:6::workstation
 before 0:4.2.6p5-15.el6_10
0:4.2.6p5-15.el6_10
ntp
Red Hat:enterprise_linux:7::client
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntpdate
Red Hat:enterprise_linux:7::client
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp-doc
Red Hat:enterprise_linux:7::client
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp-perl
Red Hat:enterprise_linux:7::client
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
sntp
Red Hat:enterprise_linux:7::client
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp
Red Hat:enterprise_linux:7::computenode
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntpdate
Red Hat:enterprise_linux:7::computenode
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp-doc
Red Hat:enterprise_linux:7::computenode
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp-perl
Red Hat:enterprise_linux:7::computenode
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
sntp
Red Hat:enterprise_linux:7::computenode
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp
Red Hat:enterprise_linux:7::server
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntpdate
Red Hat:enterprise_linux:7::server
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp-doc
Red Hat:enterprise_linux:7::server
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp-perl
Red Hat:enterprise_linux:7::server
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
sntp
Red Hat:enterprise_linux:7::server
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp
Red Hat:enterprise_linux:7::workstation
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntpdate
Red Hat:enterprise_linux:7::workstation
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp-doc
Red Hat:enterprise_linux:7::workstation
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp-perl
Red Hat:enterprise_linux:7::workstation
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
sntp
Red Hat:enterprise_linux:7::workstation
 before 0:4.2.6p5-29.el7
0:4.2.6p5-29.el7
ntp
Red Hat:rhel_eus:7.6::computenode
 before 0:4.2.6p5-28.el7_6.1
0:4.2.6p5-28.el7_6.1
ntp-debuginfo
Red Hat:rhel_eus:7.6::computenode
 before 0:4.2.6p5-28.el7_6.1
0:4.2.6p5-28.el7_6.1
ntpdate
Red Hat:rhel_eus:7.6::computenode
 before 0:4.2.6p5-28.el7_6.1
0:4.2.6p5-28.el7_6.1
ntp-doc
Red Hat:rhel_eus:7.6::computenode
 before 0:4.2.6p5-28.el7_6.1
0:4.2.6p5-28.el7_6.1
ntp-perl
Red Hat:rhel_eus:7.6::computenode
 before 0:4.2.6p5-28.el7_6.1
0:4.2.6p5-28.el7_6.1
sntp
Red Hat:rhel_eus:7.6::computenode
 before 0:4.2.6p5-28.el7_6.1
0:4.2.6p5-28.el7_6.1
ntp
Red Hat:rhel_eus:7.6::server
 before 0:4.2.6p5-28.el7_6.1
0:4.2.6p5-28.el7_6.1
ntp-debuginfo
Red Hat:rhel_eus:7.6::server
 before 0:4.2.6p5-28.el7_6.1
0:4.2.6p5-28.el7_6.1
ntpdate
Red Hat:rhel_eus:7.6::server
 before 0:4.2.6p5-28.el7_6.1
0:4.2.6p5-28.el7_6.1
ntp-doc
Red Hat:rhel_eus:7.6::server
 before 0:4.2.6p5-28.el7_6.1
0:4.2.6p5-28.el7_6.1
ntp-perl
Red Hat:rhel_eus:7.6::server
 before 0:4.2.6p5-28.el7_6.1
0:4.2.6p5-28.el7_6.1
sntp
Red Hat:rhel_eus:7.6::server
 before 0:4.2.6p5-28.el7_6.1
0:4.2.6p5-28.el7_6.1
ntp
SUSE:OpenStack Cloud 7
 before 4.2.8p12-64.8.2
4.2.8p12-64.8.2
ntp
SUSE:Linux Enterprise Desktop 12 SP3
 before 4.2.8p12-64.8.2
4.2.8p12-64.8.2
ntp
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 4.2.8p12-64.8.2
4.2.8p12-64.8.2
ntp
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 4.2.8p12-64.8.2
4.2.8p12-64.8.2
ntp
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 4.2.8p12-64.8.2
4.2.8p12-64.8.2
ntp
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 4.2.8p12-64.8.2
4.2.8p12-64.8.2
ntp
SUSE:Linux Enterprise Server 12 SP3
 before 4.2.8p12-64.8.2
4.2.8p12-64.8.2
ntp
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 4.2.8p12-64.8.2
4.2.8p12-64.8.2
ntp
SUSE:Enterprise Storage 4
 before 4.2.8p12-64.8.2
4.2.8p12-64.8.2
ntp
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 4.2.8p12-64.8.2
4.2.8p12-64.8.2
ntp
SUSE:Linux Enterprise Server 12-LTSS
 before 4.2.8p12-46.29.2
4.2.8p12-46.29.2
ntp
SUSE:Linux Enterprise Server 11 SP4
 before 4.2.8p12-64.7.1
4.2.8p12-64.7.1
ntp
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 4.2.8p12-64.7.1
4.2.8p12-64.7.1
ntp
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 4.2.8p12-48.21.1
4.2.8p12-48.21.1
ntp
SUSE:Linux Enterprise Server 11 SP3-LTSS
 before 4.2.8p12-48.21.1
4.2.8p12-48.21.1
ntp
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 4.2.8p12-48.21.1
4.2.8p12-48.21.1
ntp
SUSE:Linux Enterprise Module for Legacy 15
 before 4.2.8p12-4.3.2
4.2.8p12-4.3.2
ntp
Ubuntu:Pro:14.04:LTS
 before 1:4.2.6.p5+dfsg-3ubuntu2.14.04.13+esm1, plus listed versions
1:4.2.6.p5+dfsg-3ubuntu21:4.2.6.p5+dfsg-3ubuntu2.14.04.11:4.2.6.p5+dfsg-3ubuntu2.14.04.21:4.2.6.p5+dfsg-3ubuntu2.14.04.31:4.2.6.p5+dfsg-3ubuntu2.14.04.5
Show 7 moreShow less
1:4.2.6.p5+dfsg-3ubuntu2.14.04.61:4.2.6.p5+dfsg-3ubuntu2.14.04.71:4.2.6.p5+dfsg-3ubuntu2.14.04.81:4.2.6.p5+dfsg-3ubuntu2.14.04.101:4.2.6.p5+dfsg-3ubuntu2.14.04.111:4.2.6.p5+dfsg-3ubuntu2.14.04.121:4.2.6.p5+dfsg-3ubuntu2.14.04.13
1:4.2.6.p5+dfsg-3ubuntu2.14.04.13+esm1
ntp
Ubuntu:16.04:LTS
 before 1:4.2.8p4+dfsg-3ubuntu5.10, plus listed versions
1:4.2.6.p5+dfsg-3ubuntu81:4.2.6.p5+dfsg-3ubuntu8.11:4.2.6.p5+dfsg-3ubuntu91:4.2.8p4+dfsg-3ubuntu11:4.2.8p4+dfsg-3ubuntu2
Show 12 moreShow less
1:4.2.8p4+dfsg-3ubuntu31:4.2.8p4+dfsg-3ubuntu41:4.2.8p4+dfsg-3ubuntu51:4.2.8p4+dfsg-3ubuntu5.11:4.2.8p4+dfsg-3ubuntu5.21:4.2.8p4+dfsg-3ubuntu5.31:4.2.8p4+dfsg-3ubuntu5.41:4.2.8p4+dfsg-3ubuntu5.51:4.2.8p4+dfsg-3ubuntu5.61:4.2.8p4+dfsg-3ubuntu5.71:4.2.8p4+dfsg-3ubuntu5.81:4.2.8p4+dfsg-3ubuntu5.9
1:4.2.8p4+dfsg-3ubuntu5.10
ntp
Ubuntu:Pro:18.04:LTS
 before 1:4.2.8p10+dfsg-5ubuntu7.3+esm1, plus listed versions
1:4.2.8p10+dfsg-5ubuntu31:4.2.8p10+dfsg-5ubuntu41:4.2.8p10+dfsg-5ubuntu51:4.2.8p10+dfsg-5ubuntu61:4.2.8p10+dfsg-5ubuntu7
Show 6 moreShow less
1:4.2.8p10+dfsg-5ubuntu7.11:4.2.8p10+dfsg-5ubuntu7.1+esm11:4.2.8p10+dfsg-5ubuntu7.1+esm21:4.2.8p10+dfsg-5ubuntu7.21:4.2.8p10+dfsg-5ubuntu7.2+esm11:4.2.8p10+dfsg-5ubuntu7.3
1:4.2.8p10+dfsg-5ubuntu7.3+esm1
ntp
openSUSE:Tumbleweed
 before 4.2.8p15-7.2
4.2.8p15-7.2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBntp 4.2.8p11 - Local Buffer Overflow (PoC)2018-06-20

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

References

Show 51 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open