NT
Product
Ntp
99
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 36Medium 42Low 2
Watch
Add Ntp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-12327 | 9.8 | Jun 20 | Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the… Affected: 4.2.8 |
| CVE-2018-7183 | 9.8 | Mar 8 | Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a… Affected: 4.2.8; 4.2.8; 4.2.8; 4.2.8; 4.2.8 |
| CVE-2015-7871 | 9.8 | Aug 7 | Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication Affected: 4.2.6 before 4.2.8; 4.3.0 before 4.3.77; 4.2.5; 4.2.5; 4.2.5; 4.2.5; +34 more |
| CVE-2015-7853 | 9.8 | Aug 7 | The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.77; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +13 more |
| CVE-2015-7705 | 9.8 | Aug 7 | The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.77; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +13 more |
| CVE-2015-7854 | 8.8 | Aug 7 | Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service… Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.77; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +13 more |
| CVE-2015-7849 | 8.8 | Aug 7 | Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of… Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.77; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +13 more |
| CVE-2017-6460 | 8.8 | Mar 27 | Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr… Affected: 4.2.8; 4.3.0; 4.3.1; 4.3.2; 4.3.3; 4.3.4; +34 more |
| CVE-2017-6458 | 8.8 | Mar 27 | Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable Affected: before 4.2.8; 4.3.0 before 4.3.94; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +19 more |
| CVE-2019-11331 | 8.1 | Apr 18 | Network Time Protocol (NTP), as specified in RFC 5905, uses port 123 even for modes where a fixed port number is not required, which makes it easier for remote attackers to… Affected: All versions, or not specified |
| CVE-2017-6462 | 7.8 | Mar 27 | Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact… Affected: 4.2.8; 4.3.0; 4.3.1; 4.3.2; 4.3.3; 4.3.4; +34 more |
| CVE-2017-6452 | 7.8 | Mar 27 | Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the… Affected: 4.2.8; 4.3.0; 4.3.1; 4.3.2; 4.3.3; 4.3.4; +34 more |
| CVE-2017-6451 | 7.8 | Mar 27 | The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which… Affected: 4.2.8; 4.3.0; 4.3.1; 4.3.2; 4.3.3; 4.3.4; +34 more |
| CVE-2015-7974 | 7.7 | Jan 26 | NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct… Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.90; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +15 more |
| CVE-2020-11868 | 7.5 | Apr 17 | ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP… Affected: through 4.2.7; 4.3.98 before 4.3.100; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +23 more |
| CVE-2019-8936 | 7.5 | May 15 | NTP through 4.2.8p12 has a NULL Pointer Dereference Affected: before 4.2.8; 4.2.8; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +21 more |
| CVE-2018-7185 | 7.5 | Mar 6 | The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp… Affected: 4.2.6 before 4.2.8; 4.2.8; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +19 more |
| CVE-2018-7184 | 7.5 | Mar 6 | ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending… Affected: 4.2.8; 4.2.8; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +1 more |
| CVE-2018-7182 | 7.5 | Mar 6 | The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd… Affected: 4.2.8; 4.2.8; 4.2.8; 4.2.8; 4.2.8 |
| CVE-2015-3405 | 7.5 | Aug 9 | ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the… Affected: 4.2.8; 4.2.8; 4.2.8; 4.3.0; 4.3.1; 4.3.2; +9 more |
| CVE-2015-7704 | 7.5 | Aug 7 | The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.77; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +13 more |
| CVE-2015-7701 | 7.5 | Aug 7 | Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption) Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.77; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +13 more |
| CVE-2015-7692 | 7.5 | Aug 7 | The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.77; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +13 more |
| CVE-2015-7691 | 7.5 | Aug 7 | The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing… Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.77; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +13 more |
| CVE-2015-7703 | 7.5 | Jul 24 | The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers… Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.77; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +13 more |
| CVE-2015-5300 | 7.5 | Jul 21 | The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote… Affected: through 4.2.8 |
| CVE-2015-5219 | 7.5 | Jul 21 | The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a… Affected: through 4.2.7 |
| CVE-2015-5195 | 7.5 | Jul 21 | ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or filegen configuration command… Affected: through 4.2.7 |
| CVE-2015-5194 | 7.5 | Jul 21 | The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted logconfig commands Affected: through 4.2.7 |
| CVE-2015-7979 | 7.5 | Jan 30 | NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid… Affected: through 4.2.8; 4.3.0; 4.3.1; 4.3.2; 4.3.3; 4.3.4; +34 more |
| CVE-2015-7978 | 7.5 | Jan 30 | NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive… Affected: through 4.2.8; 4.3.0; 4.3.1; 4.3.2; 4.3.3; 4.3.4; +34 more |
| CVE-2016-9312 | 7.5 | Jan 13 | ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of service via a large UDP packet Affected: through 4.2.8 |
| CVE-2016-7434 | 7.5 | Jan 13 | The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query Affected: 4.3.0 before 4.3.94; 4.2.7; 4.2.7; 4.2.7; 4.2.7; 4.2.7; +34 more |
| CVE-2016-7426 | 7.5 | Jan 13 | NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial… Affected: 4.2.6 before 4.2.8; 4.3.0 before 4.3.94; 4.2.5; 4.2.5; 4.2.5; 4.2.5; +34 more |
| CVE-2015-7848 | 7.5 | Jan 6 | An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet Affected: 4.0 before 4.2.8; 4.3.0 before 4.3.77; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +13 more |
| CVE-2016-4957 | 7.5 | Jul 5 | ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet Affected: 4.2.8; 4.3.92 |
| CVE-2016-4954 | 7.5 | Jul 5 | The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed… Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.93; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +17 more |
| CVE-2016-4953 | 7.5 | Jul 5 | ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect… Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.93; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +17 more |
| CVE-2020-13817 | 7.4 | Jun 4 | ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for… Affected: before 4.2.8; 4.3.0 before 4.3.100; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +23 more |
| CVE-2016-1548 | 7.2 | Jan 6 | An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server Affected: 4.2.8 |
| CVE-2017-6455 | 7.0 | Mar 27 | NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPI_DLLS environment variable Affected: 4.2.8; 4.3.0; 4.3.1; 4.3.2; 4.3.3; 4.3.4; +34 more |
| CVE-2015-7851 | 6.5 | Jan 28 | Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for… Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.77; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +12 more |
| CVE-2015-7855 | 6.5 | Aug 7 | The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7… Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.77; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +13 more |
| CVE-2015-7850 | 6.5 | Aug 7 | ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the… Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.77; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +13 more |
| CVE-2015-7702 | 6.5 | Aug 7 | The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) Affected: 4.2.0 before 4.2.8; 4.3.0 before 4.3.77; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +13 more |
| CVE-2017-6464 | 6.5 | Mar 27 | NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive Affected: 4.2.8; 4.3.0; 4.3.1; 4.3.2; 4.3.3; 4.3.4; +34 more |
| CVE-2017-6463 | 6.5 | Mar 27 | NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to… Affected: 4.2.8; 4.3.0; 4.3.1; 4.3.2; 4.3.3; 4.3.4; +34 more |
| CVE-2015-7973 | 6.5 | Jan 30 | NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network Affected: before 4.2.8; 4.3.0 before 4.3.90; 4.2.8; 4.2.8; 4.2.8; 4.2.8; +15 more |
| CVE-2016-9310 | 6.5 | Jan 13 | The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet Affected: through 4.2.8 |
| CVE-2016-1549 | 6.5 | Jan 6 | A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec… Affected: 4.2.8 |