{"id":"CVE-2017-6460","aliases":["DEBIAN-CVE-2017-6460","EUVD-2017-15517","GHSA-8c4c-pjc2-qr4r","SUSE-SU-2017:1047-1","SUSE-SU-2017:1048-1","SUSE-SU-2017:1052-1","UBUNTU-CVE-2017-6460","USN-3349-1","openSUSE-SU-2024:11102-1"],"status":"published","title":"Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x...","description":"Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02682,"percentile":0.85924,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2017-03-27T00:00:00Z","modified":"2026-08-04T05:48:32Z","fixes":[{"ecosystem":"Debian:11","package":"ntp","fixed_in":["1:4.2.8p10+dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"ntp","fixed_in":["1:4.2.8p4+dfsg-3ubuntu5.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:11","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.8p10+dfsg-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p10-46.23.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p10-46.23.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p10-60.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p10-60.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p10-60.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p10-60.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p10-60.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p10-60.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p10-60.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p10-63.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p10-63.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.8p4+dfsg-3ubuntu5.5"}]}],"versions":["1:4.2.6.p5+dfsg-3ubuntu8","1:4.2.6.p5+dfsg-3ubuntu8.1","1:4.2.6.p5+dfsg-3ubuntu9","1:4.2.8p4+dfsg-3ubuntu1","1:4.2.8p4+dfsg-3ubuntu2","1:4.2.8p4+dfsg-3ubuntu3","1:4.2.8p4+dfsg-3ubuntu4","1:4.2.8p4+dfsg-3ubuntu5","1:4.2.8p4+dfsg-3ubuntu5.1","1:4.2.8p4+dfsg-3ubuntu5.2","1:4.2.8p4+dfsg-3ubuntu5.3","1:4.2.8p4+dfsg-3ubuntu5.4"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.6.p5+dfsg-3ubuntu2.14.04.11"}]}],"versions":["1:4.2.6.p5+dfsg-3ubuntu2","1:4.2.6.p5+dfsg-3ubuntu2.14.04.1","1:4.2.6.p5+dfsg-3ubuntu2.14.04.2","1:4.2.6.p5+dfsg-3ubuntu2.14.04.3","1:4.2.6.p5+dfsg-3ubuntu2.14.04.5","1:4.2.6.p5+dfsg-3ubuntu2.14.04.6","1:4.2.6.p5+dfsg-3ubuntu2.14.04.7","1:4.2.6.p5+dfsg-3ubuntu2.14.04.8","1:4.2.6.p5+dfsg-3ubuntu2.14.04.10"],"bundled":16},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.8p4+dfsg-3ubuntu5.5"}]}],"versions":["1:4.2.6.p5+dfsg-3ubuntu8","1:4.2.6.p5+dfsg-3ubuntu8.1","1:4.2.6.p5+dfsg-3ubuntu9","1:4.2.8p4+dfsg-3ubuntu1","1:4.2.8p4+dfsg-3ubuntu2","1:4.2.8p4+dfsg-3ubuntu3","1:4.2.8p4+dfsg-3ubuntu4","1:4.2.8p4+dfsg-3ubuntu5","1:4.2.8p4+dfsg-3ubuntu5.1","1:4.2.8p4+dfsg-3ubuntu5.2","1:4.2.8p4+dfsg-3ubuntu5.3","1:4.2.8p4+dfsg-3ubuntu5.4"],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-7.2"}]}],"bundled":18}],"products":[{"vendor":"ntp","product":"ntp"}],"references":[{"url":"http://www.securitytracker.com/id/1038123","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://support.apple.com/HT208144","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/97052","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://support.ntp.org/bin/view/Main/NtpBug3377","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03962en_us","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://security.paloaltonetworks.com/CVE-2017-6460","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-6460"},{"url":"https://github.com/advisories/GHSA-8c4c-pjc2-qr4r"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-6460","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171047-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1014172","tags":["report"]},{"url":"https://bugzilla.suse.com/1030050","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6464","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171048-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171052-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1031085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6460","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3349-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-6460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7426","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7427","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7428","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7431","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-7434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9042","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9310","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9311","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6458","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6464","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15025","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-6460","description":"Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.","status":"published","published":"2017-03-27T17:00:00Z","modified":"2024-08-05T15:33:19.058Z","updated_at":"2026-11-02T14:33:16.578111Z"}],"euvd":[{"id":"EUVD-2017-15517","description":"Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.","status":"published","published":"2017-03-27T17:00:00Z","modified":"2024-08-05T15:33:19Z","updated_at":"2026-11-03T02:39:12.564822Z"}],"ghsa":[{"id":"GHSA-8c4c-pjc2-qr4r","title":"Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x...","description":"Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.","status":"published","published":"2022-05-17T00:31:37Z","modified":"2023-02-03T05:01:47Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:53:02.755418Z"}],"nvd":[{"id":"CVE-2017-6460","description":"Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.","status":"published","published":"2017-03-27T17:59:00.697Z","modified":"2026-06-17T01:22:23.073Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:44.275273Z"}],"osv":[{"id":"CVE-2017-6460","description":"Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.","status":"published","published":"2017-03-27T17:59:00.697Z","modified":"2026-03-15T21:45:01.202241Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:06.412595Z"},{"id":"DEBIAN-CVE-2017-6460","description":"Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.","status":"published","published":"2017-03-27T17:59:00.697Z","modified":"2026-08-04T05:48:32.560028397Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.412243Z"},{"id":"UBUNTU-CVE-2017-6460","description":"Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.","status":"published","published":"2017-03-27T00:00:00Z","modified":"2026-02-04T03:23:46.139226Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:15.773974Z"},{"id":"openSUSE-SU-2024:11102-1","title":"ntp-4.2.8p15-7.2 on GA media","description":"These are all security issues fixed in the ntp-4.2.8p15-7.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:08:15.257534Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2017:1047-1","title":"Security update for ntp","description":"\nThis ntp update to version 4.2.8p10 fixes serveral issues.\n\nThis updated enables leap smearing. See\n/usr/share/doc/packages/ntp/README.leapsmear for details.\n\nSecurity issues fixed (bsc#1030050):\n\n- CVE-2017-6464: Denial of Service via Malformed Config\n- CVE-2017-6462: Buffer Overflow in DPTS Clock\n- CVE-2017-6463: Authenticated DoS via Malicious Config Option\n- CVE-2017-6458: Potential Overflows in ctl_put() functions\n- CVE-2017-6451: Improper use of snprintf() in mx4200_send()\n- CVE-2017-6460: Buffer Overflow in ntpq when fetching reslist\n- CVE-2016-9042: 0rigin (zero origin) DoS.\n- ntpq_stripquotes() returns incorrect Value\n- ereallocarray()/eallocarray() underused\n- Copious amounts of Unused Code\n- Off-by-one in Oncore GPS Receiver\n- Makefile does not enforce Security Flags\n\nBugfixes:\n\n- Remove spurious log messages (bsc#1014172).\n- clang scan-build findings\n- Support for openssl-1.1.0 without compatibility modes\n- Bugfix 3072 breaks multicastclient\n- forking async worker: interrupted pipe I/O\n- (...) time_pps_create: Exec format error\n- Incorrect Logic for Peer Event Limiting\n- Change the process name of forked DNS worker\n- Trap Configuration Fail\n- Nothing happens if minsane \u003c maxclock \u003c minclock\n- allow -4/-6 on restrict line with mask\n- out-of-bound pointers in ctl_putsys and decode_bitflags\n- Move ntp-kod to /var/lib/ntp, because /var/db is not a standard directory and causes problems for\n  transactional updates.\n","status":"published","published":"2017-04-18T14:06:17Z","modified":"2026-02-04T02:21:45.857408Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1048-1","title":"Security update for ntp","description":"\nThis ntp update to version 4.2.8p10 fixes serveral issues.\n\nThis updated enables leap smearing. See\n/usr/share/doc/packages/ntp/README.leapsmear for details.\n\nSecurity issues fixed (bsc#1030050):\n\n- CVE-2017-6464: Denial of Service via Malformed Config\n- CVE-2017-6462: Buffer Overflow in DPTS Clock\n- CVE-2017-6463: Authenticated DoS via Malicious Config Option\n- CVE-2017-6458: Potential Overflows in ctl_put() functions\n- CVE-2017-6451: Improper use of snprintf() in mx4200_send()\n- CVE-2017-6460: Buffer Overflow in ntpq when fetching reslist\n- CVE-2016-9042: 0rigin (zero origin) DoS.\n- ntpq_stripquotes() returns incorrect Value\n- ereallocarray()/eallocarray() underused\n- Copious amounts of Unused Code\n- Off-by-one in Oncore GPS Receiver\n- Makefile does not enforce Security Flags\n\nBugfixes:\n\n- Remove spurious log messages (bsc#1014172).\n- clang scan-build findings\n- Support for openssl-1.1.0 without compatibility modes\n- Bugfix 3072 breaks multicastclient\n- forking async worker: interrupted pipe I/O\n- (...) time_pps_create: Exec format error\n- Incorrect Logic for Peer Event Limiting\n- Change the process name of forked DNS worker\n- Trap Configuration Fail\n- Nothing happens if minsane \u003c maxclock \u003c minclock\n- allow -4/-6 on restrict line with mask\n- out-of-bound pointers in ctl_putsys and decode_bitflags\n- Move ntp-kod to /var/lib/ntp, because /var/db is not a standard directory and causes problems for\n  transactional updates.\n","status":"published","published":"2017-04-18T14:06:01Z","modified":"2026-02-04T03:40:36.128491Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1052-1","title":"Security update for ntp","description":"\nThis ntp update to version 4.2.8p10 fixes the following issues:\n\nSecurity issues fixed (bsc#1030050):\n- CVE-2017-6464: Denial of Service via Malformed Config\n- CVE-2017-6462: Buffer Overflow in DPTS Clock\n- CVE-2017-6463: Authenticated DoS via Malicious Config Option\n- CVE-2017-6458: Potential Overflows in ctl_put() functions\n- CVE-2017-6451: Improper use of snprintf() in mx4200_send()\n- CVE-2017-6460: Buffer Overflow in ntpq when fetching reslist\n- CVE-2016-9042: 0rigin (zero origin) DoS.\n- ntpq_stripquotes() returns incorrect Value\n- ereallocarray()/eallocarray() underused\n- Copious amounts of Unused Code\n- Off-by-one in Oncore GPS Receiver\n- Makefile does not enforce Security Flags\n\nBugfixes:\n- Remove spurious log messages (bsc#1014172).\n- Fixing ppc and ppc64 linker issue (bsc#1031085).\n- clang scan-build findings\n- Support for openssl-1.1.0 without compatibility modes\n- Bugfix 3072 breaks multicastclient\n- forking async worker: interrupted pipe I/O\n- (...) time_pps_create: Exec format error\n- Incorrect Logic for Peer Event Limiting\n- Change the process name of forked DNS worker\n- Trap Configuration Fail\n- Nothing happens if minsane \u003c maxclock \u003c minclock\n- allow -4/-6 on restrict line with mask\n- out-of-bound pointers in ctl_putsys and decode_bitflags\n- Move ntp-kod to /var/lib/ntp, because /var/db is not a standard directory and causes problems for\n  transactional updates.\n","status":"published","published":"2017-04-18T14:06:55Z","modified":"2026-02-04T03:30:54.871081Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"USN-3349-1","title":"ntp vulnerabilities","description":"Yihan Lian discovered that NTP incorrectly handled certain large request\ndata values. A remote attacker could possibly use this issue to cause NTP\nto crash, resulting in a denial of service. This issue only affected\nUbuntu 16.04 LTS. (CVE-2016-2519)\n\nMiroslav Lichvar discovered that NTP incorrectly handled certain spoofed\naddresses when performing rate limiting. A remote attacker could possibly\nuse this issue to perform a denial of service. This issue only affected\nUbuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 16.10. (CVE-2016-7426)\n\nMatthew Van Gundy discovered that NTP incorrectly handled certain crafted\nbroadcast mode packets. A remote attacker could possibly use this issue to\nperform a denial of service. This issue only affected Ubuntu 14.04 LTS,\nUbuntu 16.04 LTS, and Ubuntu 16.10. (CVE-2016-7427, CVE-2016-7428)\n\nMiroslav Lichvar discovered that NTP incorrectly handled certain responses.\nA remote attacker could possibly use this issue to perform a denial of\nservice. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and\nUbuntu 16.10. (CVE-2016-7429)\n\nSharon Goldberg and Aanchal Malhotra discovered that NTP incorrectly\nhandled origin timestamps of zero. A remote attacker could possibly use\nthis issue to bypass the origin timestamp protection mechanism. This issue\nonly affected Ubuntu 16.10. (CVE-2016-7431)\n\nBrian Utterback, Sharon Goldberg and Aanchal Malhotra discovered that NTP\nincorrectly performed initial sync calculations. This issue only applied\nto Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-7433)\n\nMagnus Stubman discovered that NTP incorrectly handled certain mrulist\nqueries. A remote attacker could possibly use this issue to cause NTP to\ncrash, resulting in a denial of service. This issue only affected Ubuntu\n16.04 LTS and Ubuntu 16.10. (CVE-2016-7434)\n\nMatthew Van Gund discovered that NTP incorrectly handled origin timestamp\nchecks. A remote attacker could possibly use this issue to perform a denial\nof service. This issue only affected Ubuntu Ubuntu 16.10, and Ubuntu 17.04.\n(CVE-2016-9042)\n\nMatthew Van Gundy discovered that NTP incorrectly handled certain control\nmode packets. A remote attacker could use this issue to set or unset traps.\nThis issue only applied to Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu\n16.10. (CVE-2016-9310)\n\nMatthew Van Gundy discovered that NTP incorrectly handled the trap service.\nA remote attacker could possibly use this issue to cause NTP to crash,\nresulting in a denial of service. This issue only applied to Ubuntu 14.04\nLTS, Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-9311)\n\nIt was discovered that NTP incorrectly handled memory when processing long\nvariables. A remote authenticated user could possibly use this issue to\ncause NTP to crash, resulting in a denial of service. (CVE-2017-6458)\n\nIt was discovered that NTP incorrectly handled memory when processing long\nvariables. A remote authenticated user could possibly use this issue to\ncause NTP to crash, resulting in a denial of service. This issue only\napplied to Ubuntu 16.04 LTS, Ubuntu 16.10 and Ubuntu 17.04. (CVE-2017-6460)\n\nIt was discovered that the NTP legacy DPTS refclock driver incorrectly\nhandled the /dev/datum device. A local attacker could possibly use this\nissue to cause a denial of service. (CVE-2017-6462)\n\nIt was discovered that NTP incorrectly handled certain invalid settings\nin a :config directive. A remote authenticated user could possibly use\nthis issue to cause NTP to crash, resulting in a denial of service.\n(CVE-2017-6463)\n\nIt was discovered that NTP incorrectly handled certain invalid mode\nconfiguration directives. A remote authenticated user could possibly use\nthis issue to cause NTP to crash, resulting in a denial of service.\n(CVE-2017-6464)\n","status":"published","published":"2017-07-05T18:19:15Z","modified":"2026-02-10T04:41:09Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}