{"id":"CVE-2014-9298","aliases":["EUVD-2014-9123","MGASA-2015-0063","RHSA-2015:1459","RHSA-2015:2231","SUSE-SU-2015:0259-1","SUSE-SU-2015:0259-2","SUSE-SU-2015:0259-3","SUSE-SU-2015:0274-1","SUSE-SU-2015:1173-1","UBUNTU-CVE-2014-9298","USN-2497-1","openSUSE-SU-2024:10181-1"],"status":"rejected","title":"Updated ntp packages fix security vulnerabilities","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-9750, CVE-2014-9751.  Reason: this ID was intended for one issue, but was associated with two issues.  Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2012-11-22T17:45:21Z","modified":"2026-06-26T12:21:50Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"ntp","fixed_in":["1:4.2.6.p5+dfsg-3ubuntu2.14.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:4","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6p5-15.3.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6p5-37.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6p5-37.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6p5-37.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.6.p5+dfsg-3ubuntu2.14.04.2"}]}],"versions":["1:4.2.6.p5+dfsg-3ubuntu2","1:4.2.6.p5+dfsg-3ubuntu2.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.6.p5+dfsg-3ubuntu2.14.04.2"}]}],"versions":["1:4.2.6.p5+dfsg-3ubuntu2","1:4.2.6.p5+dfsg-3ubuntu2.14.04.1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p9-1.1"}]}],"bundled":60}],"references":[{"url":"https://advisories.mageia.org/MGASA-2015-0063.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15214","tags":["report"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities","tags":["web"]},{"url":"https://www.debian.org/security/2015/dsa-3154","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1459","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=995134","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1045376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1117704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1122015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1165141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1166596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1171630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1184572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1184573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1190619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1193849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1193850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1199430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1199435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210324","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1459.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9297","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9297","tags":["advisory"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#vallen_is_not_validated_in_sever","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9298","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9298","tags":["advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9298","tags":["advisory"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#1_can_be_spoofed_on_some_OSes_so","tags":["article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9750","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9751","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9751","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1798","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1798","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1798","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1799","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1799","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1799","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3405","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3405","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3405","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2231","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1117702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1122012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1171640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1191108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1191122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1193154","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2231.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150259-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/838458","tags":["report"]},{"url":"https://bugzilla.suse.com/857195","tags":["report"]},{"url":"https://bugzilla.suse.com/883859","tags":["report"]},{"url":"https://bugzilla.suse.com/887957","tags":["report"]},{"url":"https://bugzilla.suse.com/910764","tags":["report"]},{"url":"https://bugzilla.suse.com/911792","tags":["report"]},{"url":"https://bugzilla.suse.com/924202","tags":["report"]},{"url":"https://bugzilla.suse.com/928321","tags":["report"]},{"url":"https://bugzilla.suse.com/935409","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3405","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150259-2/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/758253","tags":["report"]},{"url":"https://bugzilla.suse.com/771480","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150259-3/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/611513","tags":["report"]},{"url":"https://bugzilla.suse.com/645356","tags":["report"]},{"url":"https://bugzilla.suse.com/656345","tags":["report"]},{"url":"https://bugzilla.suse.com/680301","tags":["report"]},{"url":"https://bugzilla.suse.com/692969","tags":["report"]},{"url":"https://bugzilla.suse.com/730374","tags":["report"]},{"url":"https://bugzilla.suse.com/734467","tags":["report"]},{"url":"https://bugzilla.suse.com/817893","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150274-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151173-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-9298","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2497-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-9297","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9311","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-9298","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-9750, CVE-2014-9751.  Reason: this ID was intended for one issue, but was associated with two issues.  Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2015-10-04T20:00:00Z","modified":"2015-10-04T19:57:01Z","updated_at":"2026-11-02T14:33:42.54191Z"}],"euvd":[{"id":"EUVD-2014-9123","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-9750, CVE-2014-9751.  Reason: this ID was intended for one issue, but was associated with two issues.  Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2015-10-04T20:00:00Z","modified":"2015-10-04T19:57:01Z","updated_at":"2026-11-03T04:08:15.059343Z"}],"nvd":[{"id":"CVE-2014-9298","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-9750, CVE-2014-9751.  Reason: this ID was intended for one issue, but was associated with two issues.  Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2015-10-06T01:59:00.25Z","modified":"2023-11-07T02:23:03.52Z","updated_at":"2026-11-02T14:02:58.385843Z"}],"osv":[{"id":"MGASA-2015-0063","title":"Updated ntp packages fix security vulnerabilities","description":"Updated ntp packages fix security vulnerabilities:\n\nStephen Roettger of the Google Security Team, Sebastian Krahmer of the SUSE\nSecurity Team and Harlan Stenn of Network Time Foundation discovered that the\nlength value in extension fields is not properly validated in several code\npaths in ntp_crypto.c, which could lead to information leakage or denial of\nservice (CVE-2014-9297).\n\nStephen Roettger of the Google Security Team reported that ACLs based on IPv6\n::1 (localhost) addresses can be bypassed (CVE-2014-9298).\n","status":"published","published":"2015-02-11T20:47:51Z","modified":"2026-04-16T06:26:31.140838566Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10181-1","title":"ntp-4.2.8p9-1.1 on GA media","description":"These are all security issues fixed in the ntp-4.2.8p9-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:21:26.696395Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2015:1459","title":"Red Hat Security Advisory: ntp security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:22:21Z","modified":"2026-06-26T12:21:49.209989474Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:2231","title":"Red Hat Security Advisory: ntp security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:22:28Z","modified":"2026-06-26T12:21:50.046767614Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:0259-1","title":"Recommended update for ntp","description":"\nThis update for ntp provides the following fixes:\n\n    * Respect NTPD_FORCE_SYNC_ON_STARTUP also for dynamic peers.\n      (bnc#887957)\n    * Fix orphan mode. (bnc#883859)\n\n","status":"published","published":"2014-11-18T12:31:05Z","modified":"2025-05-02T04:03:59.725525Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0259-2","title":"Recommended update for ntp","description":"\nThis collective update for the Network Time Protocol daemon (ntp) provides \nfixes for the following reports:\n\n    * 758253: ntp fails if a host has more than 1024 IP addresses\n    * 771480: sntp not able to sync against Windows ntp server.\n\n","status":"published","published":"2012-11-22T17:45:21Z","modified":"2026-02-04T02:42:22.119171Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0259-3","title":"Security update for ntp","description":"\nThe NTP time service could have been used for remote denial of service \namplification attacks.\n\nThis issue can be fixed by the administrator as we described in our \nsecurity advisory SUSE-SA:2014:001\n\nhttp://lists.opensuse.org/opensuse-security-announce/2014-01/msg00005.html\n\u003chttp://lists.opensuse.org/opensuse-security-announce/2014-01/msg00005.html\u003e\n\nand on\n\nhttp://support.novell.com/security/cve/CVE-2013-5211.html\n\u003chttp://support.novell.com/security/cve/CVE-2013-5211.html\u003e\n\nthis update now also replaces the default ntp.conf template to fix this \nproblem.\n\nPlease note that if you have touched or modified ntp.conf yourself, it will \nnot be automatically fixed, you need to merge the changes manually as \ndescribed.\n\nAdditionally the following bug has been fixed:\n\n    * ntp start script does not update /var/lib/ntp/etc/localtime file if\n      /etc/localtime is symlink (bnc#838458)\n\nSecurity Issues:\n\n    * CVE-2013-5211\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211\u003e\n\n","status":"published","published":"2014-07-21T14:05:24Z","modified":"2026-02-04T03:48:05.752255Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0274-1","title":"Security update for ntp","description":"ntp was updated to fix four security issues.\n\nThese security issues were fixed:\n- CVE-2014-9294: util/ntp-keygen.c in ntp-keygen used a weak RNG seed, which made it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack (bnc#910764 911792).\n- CVE-2014-9293: The config_auth function in ntpd, when an auth key was not configured, improperly generated a key, which made it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack (bnc#910764 911792).\n- CVE-2014-9298: ::1 can be spoofed on some OSes, so ACLs based on IPv6 ::1 addresses could be bypassed (bnc#911792).\n- CVE-2014-9297: Information leak by not properly checking a length in several places in ntp_crypto.c (bnc#911792).\n","status":"published","published":"2015-02-10T07:37:15Z","modified":"2026-02-04T03:23:34.750643Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1173-1","title":"Recommended update for ntp","description":"\nThis update for ntp provides the following fixes:\n\n    * Respect NTPD_FORCE_SYNC_ON_STARTUP also for dynamic peers.\n      (bnc#887957)\n    * Fix orphan mode. (bnc#883859)\n\n","status":"published","published":"2014-11-18T12:31:05Z","modified":"2025-05-02T04:03:59.848835Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2014-9298","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-9750, CVE-2014-9751.  Reason: this ID was intended for one issue, but was associated with two issues.  Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2015-02-05T00:00:00Z","modified":"2026-02-04T04:21:45.473513Z","updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"USN-2497-1","title":"ntp vulnerabilities","description":"Stephen Roettger, Sebastian Krahmer, and Harlan Stenn discovered that NTP\nincorrectly handled the length value in extension fields. A remote attacker\ncould use this issue to possibly obtain leaked information, or cause the\nNTP daemon to crash, resulting in a denial of service. (CVE-2014-9297)\n\nStephen Roettger discovered that NTP incorrectly handled ACLs based on\ncertain IPv6 addresses. (CVE-2014-9298)\n","status":"published","published":"2015-02-09T17:32:37Z","modified":"2026-02-10T04:40:52Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}