{"id":"CVE-2009-3563","aliases":["DEBIAN-CVE-2009-3563","DSA-1948-1","EUVD-2009-3544","GHSA-gm22-x89c-4h54","RHSA-2009:1648","RHSA-2009:1651"],"status":"published","title":"ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial...","description":"ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.32059,"percentile":0.98323,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2009-12-08T00:00:00Z","modified":"2026-08-31T06:47:40Z","exploits":[{"source":"metasploit","id":"auxiliary/dos/ntp/ntpd_reserved_dos","title":"NTP.org ntpd Reserved Mode Denial of Service","type":"auxiliary","date":"2009-10-04","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/dos/ntp/ntpd_reserved_dos"}],"fixes":[{"ecosystem":"Debian:11","package":"ntp","fixed_in":["1:4.2.4p8+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:4.0","package":"ntp","fixed_in":["1:4.2.2.p4+dfsg-2etch4"],"sources":["osv"]},{"ecosystem":"Debian:5.0","package":"ntp","fixed_in":["1:4.2.4p4+dfsg-8lenny3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"ntp","fixed_in":["0:4.2.0.a.20040617-8.el4_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"ntp-debuginfo","fixed_in":["0:4.2.0.a.20040617-8.el4_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ntp","fixed_in":["0:4.2.0.a.20040617-8.el4_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ntp-debuginfo","fixed_in":["0:4.2.0.a.20040617-8.el4_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"ntp","fixed_in":["0:4.2.0.a.20040617-8.el4_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"ntp-debuginfo","fixed_in":["0:4.2.0.a.20040617-8.el4_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ntp","fixed_in":["0:4.2.0.a.20040617-8.el4_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ntp-debuginfo","fixed_in":["0:4.2.0.a.20040617-8.el4_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"ntp","fixed_in":["0:4.2.2p1-9.el5_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"ntp-debuginfo","fixed_in":["0:4.2.2p1-9.el5_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"ntp","fixed_in":["0:4.2.2p1-9.el5_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"ntp-debuginfo","fixed_in":["0:4.2.2p1-9.el5_4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:11","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.4p8+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:4.0","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.2.p4+dfsg-2etch4"}]}],"versions":["1:4.2.2.p4+dfsg-2","1:4.2.2.p4+dfsg-2etch1","1:4.2.2.p4+dfsg-2etch2","1:4.2.2.p4+dfsg-2etch3"]},{"source":"osv","ecosystem":"Debian:5.0","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.4p4+dfsg-8lenny3"}]}],"versions":["1:4.2.4p4+dfsg-8","1:4.2.4p4+dfsg-8lenny2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0.a.20040617-8.el4_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0.a.20040617-8.el4_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0.a.20040617-8.el4_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0.a.20040617-8.el4_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0.a.20040617-8.el4_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0.a.20040617-8.el4_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0.a.20040617-8.el4_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0.a.20040617-8.el4_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.2p1-9.el5_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.2p1-9.el5_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.2p1-9.el5_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.2p1-9.el5_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-6.el3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-6.el3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-6.el3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-6.el3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-6.el3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-6.el3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-6.el3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-6.el3"}]}],"bundled":2}],"products":[{"vendor":"ntp","product":"ntp"}],"references":[{"url":"http://www.kb.cert.org/vuls/id/568372","tags":["third-party-advisory","x_transferred","Patch","US Government Resource","fix","web"]},{"url":"http://secunia.com/advisories/38832","tags":["third-party-advisory","x_transferred","advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10673","tags":["x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11225","tags":["vdb-entry","signature","x_transferred","web"]},{"url":"http://support.avaya.com/css/P8/documents/100071808","tags":["x_transferred","web"]},{"url":"http://secunia.com/advisories/38794","tags":["third-party-advisory","x_transferred","advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00809.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=531213","tags":["x_transferred","report"]},{"url":"http://secunia.com/advisories/38764","tags":["third-party-advisory","x_transferred","advisory"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#DoS_attack_from_certain_NTP_mode","tags":["x_transferred","Patch","fix"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7X7V6J","tags":["x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19376","tags":["vdb-entry","signature","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/37255","tags":["vdb-entry","x_transferred","Patch","fix"]},{"url":"http://marc.info/?l=bugtraq\u0026m=136482797910018\u0026w=2","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://secunia.com/advisories/39593","tags":["third-party-advisory","x_transferred","advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ71047","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2010/0993","tags":["vdb-entry","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1948","tags":["vendor-advisory","x_transferred","Patch","fix"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560074","tags":["x_transferred","web"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/xntpd_advisory.asc","tags":["x_transferred","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=130168580504508\u0026w=2","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021781.1-1","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg1IZ68659","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://support.ntp.org/bugs/show_bug.cgi?id=1331","tags":["x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7076","tags":["vdb-entry","signature","x_transferred","web"]},{"url":"http://secunia.com/advisories/37922","tags":["third-party-advisory","x_transferred","advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2010-005.txt.asc","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/38834","tags":["third-party-advisory","x_transferred","advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00763.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://security-tracker.debian.org/tracker/CVE-2009-3563","tags":["x_transferred","web"]},{"url":"http://securitytracker.com/id?1023298","tags":["vdb-entry","x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12141","tags":["vdb-entry","signature","x_transferred","web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1651.html","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/37629","tags":["third-party-advisory","x_transferred","advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10691","tags":["x_transferred","web"]},{"url":"https://lists.ntp.org/pipermail/announce/2009-December/000086.html","tags":["mailing-list","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2010/0510","tags":["vdb-entry","x_transferred","advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1648.html","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7X7VD7","tags":["x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","tags":["vdb-entry","x_transferred","advisory"]},{"url":"https://www.kb.cert.org/vuls/id/417980","tags":["third-party-advisory","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3563","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gm22-x89c-4h54"},{"url":"https://security-tracker.debian.org/tracker/CVE-2009-3563","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1648","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1648.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3563","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3563","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1651","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490617","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1651.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-0159","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-0159","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0159","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2009-3563","description":"ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.","status":"published","published":"2009-12-09T00:00:00Z","modified":"2024-08-07T06:31:10.55Z","updated_at":"2026-11-02T14:33:23.749891Z"}],"euvd":[{"id":"EUVD-2009-3544","description":"ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.","status":"published","published":"2009-12-09T00:00:00Z","modified":"2024-08-07T06:31:10Z","updated_at":"2026-11-03T01:39:13.262818Z"}],"ghsa":[{"id":"GHSA-gm22-x89c-4h54","title":"ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial...","description":"ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.","status":"published","published":"2022-05-03T03:20:29Z","modified":"2023-02-01T05:01:29Z","updated_at":"2026-11-02T14:49:43.819101Z"}],"nvd":[{"id":"CVE-2009-3563","description":"ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.","status":"published","published":"2009-12-09T18:30:00.39Z","modified":"2026-06-16T23:11:54.26Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:37.939838Z"}],"osv":[{"id":"CVE-2009-3563","description":"ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.","status":"published","published":"2009-12-09T18:30:00Z","modified":"2026-04-10T03:40:55.743622Z","updated_at":"2026-11-02T15:43:57.714116Z"},{"id":"DEBIAN-CVE-2009-3563","description":"ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.","status":"published","published":"2009-12-09T18:30:00.39Z","modified":"2026-08-31T06:47:40.876565785Z","updated_at":"2026-11-02T15:45:24.013654Z"},{"id":"DSA-1948-1","title":"ntp - denial of service","status":"published","published":"2009-12-08T00:00:00Z","modified":"2026-03-09T01:22:05.917765Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"RHSA-2009:1648","title":"Red Hat Security Advisory: ntp security update","status":"published","published":"2024-09-15T18:12:28Z","modified":"2026-06-26T10:12:36Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:1651","title":"Red Hat Security Advisory: ntp security update","status":"published","published":"2024-09-15T18:12:33Z","modified":"2026-06-26T10:12:37Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}