Ntp vulnerabilities

Products

• Ntp 99

Newest

• ntp praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. CVE-2023-26555 Fix available 6.4 MediumApril 11, 2023
• ntp mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. CVE-2023-26554 Fix available 5.6 MediumApril 11, 2023
• ntp mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing... CVE-2023-26553 Fix available 5.6 MediumApril 11, 2023
• ntp mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. CVE-2023-26552 Fix available 5.6 MediumApril 11, 2023
• ntp mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. CVE-2023-26551 Fix available 5.6 MediumApril 11, 2023
• ntp, netapp 8300 firmware, 8700 firmware +13 more +15 more ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a... CVE-2020-15025 Fix available 4.4 MediumJune 24, 2020
• ntp, fujitsu m10-1 firmware, m10-4 firmware +22 more +24 more ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of... CVE-2020-13817 Fix available 5.9 MediumJune 4, 2020
• ntp ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a... CVE-2018-8956 Fix available 5.3 MediumMay 6, 2020
• ntp, debian linux, netapp all flash fabric-attached storage 8300 firmware +14 more +16 more ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block... CVE-2020-11868 Fix available 5.9 MediumApril 17, 2020
• ntp, f5 big-ip access policy manager, big-ip advanced firewall manager +22 more +24 more An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a... CVE-2014-5209 Fix available 5.3 MediumJanuary 8, 2020
• ntp Network Time Protocol (NTP), as specified in RFC 5905, uses port 123 even for modes where a fixed... CVE-2019-11331 8.1 HighApril 18, 2019
• ntp, fedoraproject fedora, hpe hpux-ntp +3 more +5 more NTP through 4.2.8p12 has a NULL Pointer Dereference. CVE-2019-8936 Public exploitFix available 7.5 HighMarch 27, 2019
• ntp Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to... CVE-2018-12327 Public exploitFix available EPSS 27.5% 9.8 CriticalJune 20, 2018
• ntp, canonical ubuntu linux, freebsd +1 more +3 more Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote... CVE-2018-7183 Fix available EPSS 10.2% 9.8 CriticalMarch 8, 2018
• ntp, hpe hpux-ntp, netapp hci +6 more +8 more ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the... CVE-2018-7170 Fix available 5.3 MediumMarch 6, 2018
• ntp, canonical ubuntu linux, hpe hpux-ntp +13 more +15 more The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of... CVE-2018-7185 Fix available 7.5 HighMarch 6, 2018
• ntp, canonical ubuntu linux, netapp cloud backup +7 more +9 more ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp,... CVE-2018-7184 Fix available 7.5 HighMarch 6, 2018
• ntp, canonical ubuntu linux, netapp element software +2 more The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a... CVE-2018-7182 Public exploitFix available EPSS 28.8% 7.5 HighMarch 6, 2018
• ntp The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have... CVE-2017-6459 5.5 MediumMarch 27, 2017
• ntp NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain... CVE-2017-6455 7.0 HighMarch 27, 2017
• ntp Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3... CVE-2017-6452 7.8 HighMarch 27, 2017
• ntp The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4... CVE-2017-6451 Fix available 7.8 HighMarch 27, 2017
• ntp NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service ... CVE-2017-6464 Fix available 6.5 MediumMarch 27, 2017
• ntp NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial... CVE-2017-6463 Fix available 6.5 MediumMarch 27, 2017
• ntp Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before... CVE-2017-6462 Fix available 7.8 HighMarch 27, 2017
• ntp Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x... CVE-2017-6460 Fix available 8.8 HighMarch 27, 2017
• ntp, apple mac os x, hpe hpux-ntp +1 more +3 more Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3... CVE-2017-6458 Fix available 8.8 HighMarch 27, 2017
• ntp ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of... CVE-2016-9312 EPSS 31.7% 7.5 HighJanuary 13, 2017
• ntp, freebsd, hpe hpux-ntp +2 more +4 more An exploitable denial of service vulnerability exists in the origin timestamp check functionality... CVE-2016-9042 Fix available 3.7 LowDecember 31, 2016
• ntp, hpe hpux-ntp +1 more The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of... CVE-2016-7434 Public exploitFix available EPSS 53.1% 7.5 HighDecember 19, 2016
• ntp NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote... CVE-2016-7433 Fix available 5.3 MediumDecember 19, 2016
• ntp NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism... CVE-2016-7431 Fix available 5.3 MediumDecember 19, 2016
• ntp ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast... CVE-2016-7428 Fix available 4.3 MediumDecember 19, 2016
• ntp The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote... CVE-2016-7427 Fix available 4.3 MediumDecember 19, 2016
• ntp ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a... CVE-2016-9311 Fix available EPSS 11.1% 5.9 MediumDecember 8, 2016
• ntp The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to... CVE-2016-9310 Fix available EPSS 11.1% 6.5 MediumDecember 8, 2016
• ntp NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a... CVE-2016-7429 Fix available 3.7 LowDecember 8, 2016
• ntp, canonical ubuntu linux, hpe hpux-ntp +6 more +8 more NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting... CVE-2016-7426 Fix available EPSS 12.4% 7.5 HighDecember 8, 2016
• ntp, novell suse manager, opensuse leap +6 more +8 more ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash)... CVE-2016-4957 Fix available EPSS 44.9% 7.5 HighJune 13, 2016
• ntp, opensuse leap, opensuse +9 more +11 more ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral... CVE-2016-4953 Fix available EPSS 17.2% 7.5 HighJune 13, 2016
• ntp, novell suse manager, opensuse leap +7 more +9 more ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved... CVE-2016-4956 Fix available EPSS 16.4% 5.3 MediumJune 7, 2016
• ntp, novell suse manager, opensuse leap +7 more +9 more ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a... CVE-2016-4955 Fix available 5.9 MediumJune 7, 2016
• ntp, opensuse leap, opensuse +9 more +11 more The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote... CVE-2016-4954 Fix available EPSS 13.3% 7.5 HighJune 7, 2016
• ntp ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of... CVE-2016-2519 Fix available 5.9 MediumMay 11, 2016
• ntp NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service ... CVE-2016-2517 Fix available 5.3 MediumMay 11, 2016
• ntp, ntpsec +1 more ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying... CVE-2016-1551 Fix available 3.7 LowMay 11, 2016
• ntp, ntpsec +1 more A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win... CVE-2016-1549 Fix available 6.5 MediumMay 11, 2016
• ntp, debian linux, freebsd +13 more +15 more The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote... CVE-2016-2518 Fix available EPSS 15.1% 5.3 MediumApril 29, 2016
• ntp NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to... CVE-2016-2516 Fix available 5.3 MediumApril 29, 2016
• ntp, ntpsec +1 more An exploitable vulnerability exists in the message authentication functionality of libntp in ntp... CVE-2016-1550 Fix available 5.3 MediumApril 29, 2016
• Show olderLoading…