{"id":"CVE-2014-9750","aliases":["DEBIAN-CVE-2014-9750","DLA-149-1","DSA-3154-1","DSA-3154-2","EUVD-2014-9556","GHSA-2cf6-qqmm-m55v","RHSA-2015:1459","RHSA-2015:2231"],"status":"published","title":"ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows...","description":"ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obtain sensitive information from process memory or cause a denial of service (daemon crash) via a packet containing an extension field with an invalid value for the length of its value field.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.06135,"percentile":0.93494,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2015-02-05T00:00:00Z","modified":"2026-08-27T12:47:35Z","fixes":[{"ecosystem":"Debian:11","package":"ntp","fixed_in":["1:4.2.6.p5+dfsg-5"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"ntp","fixed_in":["1:4.2.6.p5+dfsg-2+deb7u3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:11","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.6.p5+dfsg-5"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.6.p2+dfsg-1+deb6u2"}]}],"versions":["1:4.2.6.p2+dfsg-1"],"bundled":2},{"source":"osv","ecosystem":"Debian:7","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.6.p5+dfsg-2+deb7u2"}]}],"versions":["1:4.2.6.p5+dfsg-2","1:4.2.6.p5+dfsg-2+deb7u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:7","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.6.p5+dfsg-2+deb7u3"}]}],"versions":["1:4.2.6.p5+dfsg-2","1:4.2.6.p5+dfsg-2+deb7u1","1:4.2.6.p5+dfsg-2+deb7u2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-5.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-22.el7"}]}],"bundled":7}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"ntp","product":"ntp"},{"vendor":"oracle","product":"linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"http://www.kb.cert.org/vuls/id/852879","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#December_2014_NTP_Security_Vulne","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/72583","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1184573","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3388","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1459.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://bugs.ntp.org/show_bug.cgi?id=2671","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Vendor Advisory","advisory","fix","report"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03886en_us","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9750","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-2cf6-qqmm-m55v"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-9750","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1459","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=995134","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1045376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1117704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1122015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1165141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1166596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1171630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1184572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1190619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1193849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1193850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1199430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1199435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210324","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1459.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9297","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9297","tags":["advisory"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#vallen_is_not_validated_in_sever","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9298","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9298","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9298","tags":["advisory"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#1_can_be_spoofed_on_some_OSes_so","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9750","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-9751","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9751","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1798","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1798","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1798","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1799","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1799","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1799","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3405","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3405","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3405","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2231","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1117702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1122012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1171640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1191108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1191122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1193154","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2231.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-9750","description":"ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obtain sensitive information from process memory or cause a denial of service (daemon crash) via a packet containing an extension field with an invalid value for the length of its value field.","status":"published","published":"2015-10-04T20:00:00Z","modified":"2024-08-06T13:55:04.796Z","updated_at":"2026-11-02T14:33:42.54191Z"}],"euvd":[{"id":"EUVD-2014-9556","description":"ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obtain sensitive information from process memory or cause a denial of service (daemon crash) via a packet containing an extension field with an invalid value for the length of its value field.","status":"published","published":"2015-10-04T20:00:00Z","modified":"2024-08-06T13:55:04Z","updated_at":"2026-11-03T01:56:47.945236Z"}],"ghsa":[{"id":"GHSA-2cf6-qqmm-m55v","title":"ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows...","description":"ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obtain sensitive information from process memory or cause a denial of service (daemon crash) via a packet containing an extension field with an invalid value for the length of its value field.","status":"published","published":"2022-05-13T01:25:44Z","modified":"2023-02-01T05:07:17Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:50:31.141675Z"}],"nvd":[{"id":"CVE-2014-9750","description":"ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obtain sensitive information from process memory or cause a denial of service (daemon crash) via a packet containing an extension field with an invalid value for the length of its value field.","status":"published","published":"2015-10-06T01:59:00.283Z","modified":"2026-06-17T00:18:55.303Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:58.385843Z"}],"osv":[{"id":"CVE-2014-9750","description":"ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obtain sensitive information from process memory or cause a denial of service (daemon crash) via a packet containing an extension field with an invalid value for the length of its value field.","status":"published","published":"2015-10-06T01:59:00Z","modified":"2026-04-10T03:44:55.607009Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2014-9750","description":"ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obtain sensitive information from process memory or cause a denial of service (daemon crash) via a packet containing an extension field with an invalid value for the length of its value field.","status":"published","published":"2015-10-06T01:59:00.283Z","modified":"2026-08-27T12:47:35.184364474Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"DLA-149-1","title":"ntp - security update","status":"published","published":"2015-02-07T00:00:00Z","modified":"2026-03-09T01:19:49.252663Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-3154-1","title":"ntp - security update","status":"published","published":"2015-02-05T00:00:00Z","modified":"2026-03-09T01:23:30.200303Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"DSA-3154-2","title":"ntp - incomplete fix","status":"published","published":"2015-02-07T00:00:00Z","modified":"2026-03-09T01:22:35.467828Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"RHSA-2015:1459","title":"Red Hat Security Advisory: ntp security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:22:21Z","modified":"2026-06-26T12:21:49.209989474Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:2231","title":"Red Hat Security Advisory: ntp security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:22:28Z","modified":"2026-06-26T12:21:50.046767614Z","updated_at":"2026-11-02T15:53:03.182161Z"}]}}