Skip to contentNtp vulnerabilities
Newest
- ntp, ntpsec +1 moreAn attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that...CVE-2016-1548Fix available7.2 High
- ntp, ntpsec +1 moreAn off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4...CVE-2016-1547Fix available5.3 Medium
- ntpThe ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by...CVE-2015-8140Fix available4.8 Medium
- ntpntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then...CVE-2015-8139Fix available5.3 Medium
- ntp, debian linux, netapp clustered data ontap +3 more +5 moreNTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys...CVE-2015-7974Fix available7.7 High
- ntpThe getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows...CVE-2015-8158Fix available5.9 Medium
- ntpNTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp...CVE-2015-8138Fix available5.3 Medium
- ntpNTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service ...CVE-2015-7979Fix availableEPSS 11.9%7.5 High
- ntpNTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service...CVE-2015-7978Fix available7.5 High
- ntp, canonical ubuntu linux, debian linux +6 more +8 morentpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of...CVE-2015-7977Fix available5.9 Medium
- ntp, novell suse openstack cloud, opensuse leap +6 more +8 moreThe ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77...CVE-2015-7976Fix available4.3 Medium
- ntpThe nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the...CVE-2015-7975Fix available6.2 Medium
- ntp, canonical ubuntu linux, freebsd +4 more +6 moreNTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the...CVE-2015-7973Fix available6.5 Medium
- ntp, netapp clustered data ontap, data ontap +3 more +5 moreBuffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x...CVE-2015-7854Fix availableEPSS 14.6%8.8 High
- ntp, netapp clustered data ontap, data ontap +3 more +5 moreUse-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7849Fix availableEPSS 16.8%8.8 High
- ntp, netapp clustered data ontap, data ontap operating in 7-mode +3 more +5 moreAn integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation...CVE-2015-7848Fix available7.5 High
- ntpDirectory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP...CVE-2015-7851Fix available6.5 Medium
- ntp, debian linux, netapp clustered data ontap +4 more +6 moreCrypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote...CVE-2015-7871Fix availableEPSS 81.8%9.8 Critical
- ntp, debian linux, netapp clustered data ontap +6 more +8 moreThe decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7855Public exploitFix availableEPSS 31.2%6.5 Medium
- ntp, netapp clustered data ontap, data ontap +3 more +5 moreThe datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77...CVE-2015-7853Fix availableEPSS 11.8%9.8 Critical
- ntp, debian linux, netapp clustered data ontap +10 more +12 morentpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a...CVE-2015-7852Fix availableEPSS 12.3%5.9 Medium
- ntp, debian linux, netapp clustered data ontap +4 more +6 morentpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to...CVE-2015-7850Fix available6.5 Medium
- ntp, citrix xenserver, netapp clustered data ontap +5 more +7 moreThe rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote...CVE-2015-7705Fix availableEPSS 12.2%9.8 Critical
- ntp, citrix xenserver, debian linux +11 more +13 moreThe ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to...CVE-2015-7704Fix availableEPSS 10.7%7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77...CVE-2015-7703Fix available7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7702Fix available6.5 Medium
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreMemory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4...CVE-2015-7701Fix available7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7692Fix available7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7691Fix available7.5 High
- ntp, canonical ubuntu linux, debian linux +16 more +18 moreThe panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the...CVE-2015-5300Fix available7.5 High
- ntp, canonical ubuntu linux, debian linux +13 more +15 moreThe ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions...CVE-2015-5219Fix available7.5 High
- ntp, canonical ubuntu linux, debian linux +5 more +7 morentp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of...CVE-2015-5195Public exploitFix available7.5 High
- ntp, canonical ubuntu linux, debian linux +10 more +12 moreThe log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote...CVE-2015-5194Fix available7.5 High
- ntp, debian linux, fedoraproject fedora +2 morentpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users...CVE-2015-5146Fix available5.3 Medium
- ntpThe symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2...CVE-2015-1798Fix available1.8 Low
- debian linux, ntp, redhat enterprise linux desktop +2 more +4 moreThe read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X...CVE-2014-9751Fix available6.8 Medium
- ntp, debian linux, redhat enterprise linux desktop +2 more +4 morentp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows...CVE-2014-9750Fix available5.8 Medium
- ntpThe receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after...CVE-2014-9296Fix availableEPSS 16.2%5.0 Medium
- ntp, debian linux, fedoraproject fedora +10 more +12 morentp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys...CVE-2015-3405Fix available7.5 High
- ntpThe symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x...CVE-2015-1799Fix available4.3 Medium
- ntp, opensuse, oracle linux +2 moreThe monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to...CVE-2013-5211Public exploitFix availableEPSS 97.5%5.0 Medium
- ntpMultiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to...CVE-2014-9295Public exploitFix availableEPSS 79.1%7.5 High
- ntputil/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it...CVE-2014-9294Fix availableEPSS 13.0%7.5 High
- ntpThe config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured,...CVE-2014-9293Fix availableEPSS 13.0%7.5 High
- ntpntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial...CVE-2009-3563Fix availableEPSS 32.1%6.4 Medium
- ntpStack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2...CVE-2009-1252Fix availableEPSS 21.3%6.8 Medium
- ntpStack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2...CVE-2009-0159Fix availableEPSS 13.2%6.8 Medium
- ntpNTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from...CVE-2009-0021Fix available5.0 Medium
- ntp, hp tru64 unix +1 moreInteger overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong...CVE-2004-0657Fix available5.0 Medium