{"id":"CVE-2018-8956","aliases":["DEBIAN-CVE-2018-8956","EUVD-2018-20563","GHSA-gg7p-jc5w-p68m","SUSE-SU-2020:14415-1","SUSE-SU-2020:1805-1","SUSE-SU-2020:1823-1","UBUNTU-CVE-2018-8956","openSUSE-SU-2020:0934-1","openSUSE-SU-2020:1007-1","openSUSE-SU-2024:11102-1"],"status":"published","title":"ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a...","description":"ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a part of the same broadcast network or control a slave in that broadcast network that can capture certain required packets on the attacker's behalf and send them to the attacker.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03144,"percentile":0.88011,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2020-05-06T18:03:41Z","modified":"2026-08-04T06:04:38Z","fixes":[{"ecosystem":"Debian:11","package":"ntp","fixed_in":["1:4.2.8p14+dfsg-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:11","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.8p14+dfsg-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-64.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-88.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP1","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-4.10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP2","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-4.10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-4.10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-4.10.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.2.6.p5+dfsg-3ubuntu2","1:4.2.6.p5+dfsg-3ubuntu2.14.04.1","1:4.2.6.p5+dfsg-3ubuntu2.14.04.2","1:4.2.6.p5+dfsg-3ubuntu2.14.04.3","1:4.2.6.p5+dfsg-3ubuntu2.14.04.5","1:4.2.6.p5+dfsg-3ubuntu2.14.04.6","1:4.2.6.p5+dfsg-3ubuntu2.14.04.7","1:4.2.6.p5+dfsg-3ubuntu2.14.04.8","1:4.2.6.p5+dfsg-3ubuntu2.14.04.10","1:4.2.6.p5+dfsg-3ubuntu2.14.04.11","1:4.2.6.p5+dfsg-3ubuntu2.14.04.12","1:4.2.6.p5+dfsg-3ubuntu2.14.04.13","1:4.2.6.p5+dfsg-3ubuntu2.14.04.13+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.2.6.p5+dfsg-3ubuntu8","1:4.2.6.p5+dfsg-3ubuntu8.1","1:4.2.6.p5+dfsg-3ubuntu9","1:4.2.8p4+dfsg-3ubuntu1","1:4.2.8p4+dfsg-3ubuntu2","1:4.2.8p4+dfsg-3ubuntu3","1:4.2.8p4+dfsg-3ubuntu4","1:4.2.8p4+dfsg-3ubuntu5","1:4.2.8p4+dfsg-3ubuntu5.1","1:4.2.8p4+dfsg-3ubuntu5.2","1:4.2.8p4+dfsg-3ubuntu5.3","1:4.2.8p4+dfsg-3ubuntu5.4","1:4.2.8p4+dfsg-3ubuntu5.5","1:4.2.8p4+dfsg-3ubuntu5.6","1:4.2.8p4+dfsg-3ubuntu5.7","1:4.2.8p4+dfsg-3ubuntu5.8","1:4.2.8p4+dfsg-3ubuntu5.9","1:4.2.8p4+dfsg-3ubuntu5.10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.2.8p10+dfsg-5ubuntu3","1:4.2.8p10+dfsg-5ubuntu4","1:4.2.8p10+dfsg-5ubuntu5","1:4.2.8p10+dfsg-5ubuntu6","1:4.2.8p10+dfsg-5ubuntu7","1:4.2.8p10+dfsg-5ubuntu7.1","1:4.2.8p10+dfsg-5ubuntu7.1+esm1","1:4.2.8p10+dfsg-5ubuntu7.1+esm2","1:4.2.8p10+dfsg-5ubuntu7.2","1:4.2.8p10+dfsg-5ubuntu7.2+esm1","1:4.2.8p10+dfsg-5ubuntu7.3","1:4.2.8p10+dfsg-5ubuntu7.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.2.8p12+dfsg-3ubuntu2","1:4.2.8p12+dfsg-3ubuntu3","1:4.2.8p12+dfsg-3ubuntu4","1:4.2.8p12+dfsg-3ubuntu4.20.04.1","1:4.2.8p12+dfsg-3ubuntu4.20.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.2.8p12+dfsg-3ubuntu6","1:4.2.8p15+dfsg-1ubuntu1","1:4.2.8p15+dfsg-1ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-lp151.2.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-lp152.3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-7.2"}]}],"bundled":18}],"products":[{"vendor":"ntp","product":"ntp"}],"references":[{"url":"http://www.ntp.org/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://tools.ietf.org/html/rfc5905","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://nikhiltripathi.in/NTP_attack.pdf","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://arxiv.org/abs/2005.01783","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://security.netapp.com/advisory/ntap-20200518-0006/","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00005.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00044.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8956"},{"url":"https://github.com/advisories/GHSA-gg7p-jc5w-p68m"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-8956","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014415-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1169740","tags":["report"]},{"url":"https://bugzilla.suse.com/1171355","tags":["report"]},{"url":"https://bugzilla.suse.com/1172651","tags":["report"]},{"url":"https://bugzilla.suse.com/1173334","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15025","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201805-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201823-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1125401","tags":["report"]},{"url":"https://bugzilla.suse.com/992038","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-8956","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8956","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BIQMBPSMZGTUEK5KJC4HX6YOA3YJ3SL6/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JNRU5O2D5HWSXEDH4T2XTCSGOTFSCOIH/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8936","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-8956","description":"ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a part of the same broadcast network or control a slave in that broadcast network that can capture certain required packets on the attacker's behalf and send them to the attacker.","status":"published","published":"2020-05-06T18:03:41Z","modified":"2024-08-05T07:10:47.326Z","updated_at":"2026-11-02T14:35:04.172099Z"}],"euvd":[{"id":"EUVD-2018-20563","description":"ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a part of the same broadcast network or control a slave in that broadcast network that can capture certain required packets on the attacker's behalf and send them to the attacker.","status":"published","published":"2020-05-06T18:03:41Z","modified":"2024-08-05T07:10:47Z","updated_at":"2026-11-03T02:40:01.4233Z"}],"ghsa":[{"id":"GHSA-gg7p-jc5w-p68m","title":"ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a...","description":"ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a part of the same broadcast network or control a slave in that broadcast network that can capture certain required packets on the attacker's behalf and send them to the attacker.","status":"published","published":"2022-05-24T17:17:15Z","modified":"2023-01-29T05:02:26Z","updated_at":"2026-11-02T14:45:05.277553Z"}],"nvd":[{"id":"CVE-2018-8956","description":"ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a part of the same broadcast network or control a slave in that broadcast network that can capture certain required packets on the attacker's behalf and send them to the attacker.","status":"published","published":"2020-05-06T19:15:12.41Z","modified":"2026-06-17T02:05:43.317Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:05:00.03074Z"}],"osv":[{"id":"CVE-2018-8956","description":"ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a part of the same broadcast network or control a slave in that broadcast network that can capture certain required packets on the attacker's behalf and send them to the attacker.","status":"published","published":"2020-05-06T19:15:12.41Z","modified":"2026-03-15T22:28:48.565745Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:10.051046Z"},{"id":"DEBIAN-CVE-2018-8956","description":"ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a part of the same broadcast network or control a slave in that broadcast network that can capture certain required packets on the attacker's behalf and send them to the attacker.","status":"published","published":"2020-05-06T19:15:12.41Z","modified":"2026-08-04T06:04:38.413417306Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:31.170944Z"},{"id":"UBUNTU-CVE-2018-8956","description":"ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a part of the same broadcast network or control a slave in that broadcast network that can capture certain required packets on the attacker's behalf and send them to the attacker.","status":"published","published":"2020-05-06T19:15:00Z","modified":"2025-10-24T04:46:58Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:18.772093Z"},{"id":"openSUSE-SU-2020:0934-1","title":"Security update for ntp","description":"This update for ntp fixes the following issues:\n\nntp was updated to 4.2.8p15\n\n- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address \n  frequently send to the client ntpd could have caused denial of service (bsc#1169740).\n- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent \n  a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed \n  mode 3 and mode 5 packets (bsc#1171355).\n- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time \n  from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).\n- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming \n  the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).\n- Removed an OpenSSL version warning (bsc#992038 and bsc#1125401).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-07-06T14:39:34Z","modified":"2026-02-04T04:14:11.404331Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:1007-1","title":"Security update for ntp","description":"This update for ntp fixes the following issues:\n\nntp was updated to 4.2.8p15\n\n- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address \n  frequently send to the client ntpd could have caused denial of service (bsc#1169740).\n- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent \n  a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed \n  mode 3 and mode 5 packets (bsc#1171355).\n- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time \n  from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).\n- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming \n  the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).\n- Removed an OpenSSL version warning (bsc#992038 and bsc#1125401).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-07-19T08:27:16Z","modified":"2026-02-04T02:41:02.11813Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11102-1","title":"ntp-4.2.8p15-7.2 on GA media","description":"These are all security issues fixed in the ntp-4.2.8p15-7.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:08:15.257534Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2020:14415-1","title":"Security update for ntp","description":"This update for ntp fixes the following issues:\n\nntp was updated to 4.2.8p15\n\n- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address \n  frequently send to the client ntpd could have caused denial of service (bsc#1169740).\n- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent \n  a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed \n  mode 3 and mode 5 packets (bsc#1171355).\n- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time \n  from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).\n- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming \n  the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).\n","status":"published","published":"2020-07-01T14:18:41Z","modified":"2026-02-04T02:22:56.615519Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1805-1","title":"Security update for ntp","description":"This update for ntp fixes the following issues:\n\nntp was updated to 4.2.8p15\n\n- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address \n  frequently send to the client ntpd could have caused denial of service (bsc#1169740).\n- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent \n  a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed \n  mode 3 and mode 5 packets (bsc#1171355).\n- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time \n  from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).\n- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming \n  the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).\t  \n","status":"published","published":"2020-06-30T15:37:45Z","modified":"2026-02-04T03:20:09.077271Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1823-1","title":"Security update for ntp","description":"This update for ntp fixes the following issues:\n\nntp was updated to 4.2.8p15\n\n- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address \n  frequently send to the client ntpd could have caused denial of service (bsc#1169740).\n- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent \n  a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed \n  mode 3 and mode 5 packets (bsc#1171355).\n- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time \n  from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).\n- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming \n  the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).\n- Removed an OpenSSL version warning (bsc#992038 and bsc#1125401).\n","status":"published","published":"2020-07-02T09:32:43Z","modified":"2026-02-04T02:53:04.936713Z","updated_at":"2026-11-02T15:53:47.634847Z"}]}}