NT
Vendor
Ntp
99
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-26555 | NT Ntp Ntp | 6.4 | Apr 11 | praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write |
| CVE-2023-26554 | NT Ntp Ntp | 5.6 | Apr 11 | mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character |
| CVE-2023-26553 | NT Ntp Ntp | 5.6 | Apr 11 | mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number |
| CVE-2023-26552 | NT Ntp Ntp | 5.6 | Apr 11 | mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point |
| CVE-2023-26551 | NT Ntp Ntp | 5.6 | Apr 11 | mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop |
| CVE-2020-15025 | NT Ntp Ntp | 4.9 | Jun 24 | ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not… |
| CVE-2020-13817 | NT Ntp Ntp | 7.4 | Jun 4 | ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for… |
| CVE-2018-8956 | NT Ntp Ntp | 5.3 | May 6 | ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode… |
| CVE-2020-11868 | NT Ntp Ntp | 7.5 | Apr 17 | ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP… |
| CVE-2015-7851 | NT Ntp Ntp | 6.5 | Jan 28 | Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for… |
| CVE-2014-5209 | NT Ntp Ntp | 5.3 | Jan 8 | An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive… |
| CVE-2019-8936 | NT Ntp Ntp | 7.5 | May 15 | NTP through 4.2.8p12 has a NULL Pointer Dereference |
| CVE-2019-11331 | NT Ntp Ntp | 8.1 | Apr 18 | Network Time Protocol (NTP), as specified in RFC 5905, uses port 123 even for modes where a fixed port number is not required, which makes it easier for remote attackers to… |
| CVE-2018-12327 | NT Ntp Ntp | 9.8 | Jun 20 | Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the… |
| CVE-2016-9042 | NT Ntp Ntp | 5.9 | Jun 4 | An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9 |
| CVE-2018-7183 | NT Ntp Ntp | 9.8 | Mar 8 | Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a… |
| CVE-2018-7185 | NT Ntp Ntp | 7.5 | Mar 6 | The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp… |
| CVE-2018-7184 | NT Ntp Ntp | 7.5 | Mar 6 | ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending… |
| CVE-2018-7182 | NT Ntp Ntp | 7.5 | Mar 6 | The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd… |
| CVE-2018-7170 | NT Ntp Ntp | 5.3 | Mar 6 | ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order… |
| CVE-2015-5146 | NT Ntp Ntp | 5.3 | Aug 24 | ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a computer entrusted to… |
| CVE-2015-3405 | NT Ntp Ntp | 7.5 | Aug 9 | ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the… |
| CVE-2015-7871 | NT Ntp Ntp | 9.8 | Aug 7 | Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication |
| CVE-2015-7855 | NT Ntp Ntp | 6.5 | Aug 7 | The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7… |
| CVE-2015-7854 | NT Ntp Ntp | 8.8 | Aug 7 | Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service… |
| CVE-2015-7853 | NT Ntp Ntp | 9.8 | Aug 7 | The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service… |
| CVE-2015-7852 | NT Ntp Ntp | 5.9 | Aug 7 | ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets |
| CVE-2015-7850 | NT Ntp Ntp | 6.5 | Aug 7 | ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the… |
| CVE-2015-7849 | NT Ntp Ntp | 8.8 | Aug 7 | Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of… |
| CVE-2015-7705 | NT Ntp Ntp | 9.8 | Aug 7 | The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests |
| CVE-2015-7704 | NT Ntp Ntp | 7.5 | Aug 7 | The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages |
| CVE-2015-7702 | NT Ntp Ntp | 6.5 | Aug 7 | The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) |
| CVE-2015-7701 | NT Ntp Ntp | 7.5 | Aug 7 | Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption) |
| CVE-2015-7692 | NT Ntp Ntp | 7.5 | Aug 7 | The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) |
| CVE-2015-7691 | NT Ntp Ntp | 7.5 | Aug 7 | The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing… |
| CVE-2015-7703 | NT Ntp Ntp | 7.5 | Jul 24 | The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers… |
| CVE-2015-5300 | NT Ntp Ntp | 7.5 | Jul 21 | The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote… |
| CVE-2015-5219 | NT Ntp Ntp | 7.5 | Jul 21 | The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a… |
| CVE-2015-5195 | NT Ntp Ntp | 7.5 | Jul 21 | ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or filegen configuration command… |
| CVE-2015-5194 | NT Ntp Ntp | 7.5 | Jul 21 | The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted logconfig commands |
| CVE-2017-6464 | NT Ntp Ntp | 6.5 | Mar 27 | NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive |
| CVE-2017-6463 | NT Ntp Ntp | 6.5 | Mar 27 | NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to… |
| CVE-2017-6462 | NT Ntp Ntp | 7.8 | Mar 27 | Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact… |
| CVE-2017-6460 | NT Ntp Ntp | 8.8 | Mar 27 | Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr… |
| CVE-2017-6459 | NT Ntp Ntp | 5.5 | Mar 27 | The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes |
| CVE-2017-6458 | NT Ntp Ntp | 8.8 | Mar 27 | Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable |
| CVE-2017-6455 | NT Ntp Ntp | 7.0 | Mar 27 | NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPI_DLLS environment variable |
| CVE-2017-6452 | NT Ntp Ntp | 7.8 | Mar 27 | Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the… |
| CVE-2017-6451 | NT Ntp Ntp | 7.8 | Mar 27 | The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which… |
| CVE-2016-2519 | NT Ntp Ntp | 5.9 | Jan 30 | ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem… |
| CVE-2016-2518 | NT Ntp Ntp | 5.3 | Jan 30 | The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large… |
| CVE-2016-2517 | NT Ntp Ntp | 5.3 | Jan 30 | NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or… |
| CVE-2016-2516 | NT Ntp Ntp | 5.3 | Jan 30 | NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service (ntpd abort) by using the same IP address multiple times in… |
| CVE-2015-8158 | NT Ntp Ntp | 5.9 | Jan 30 | The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets… |
| CVE-2015-8140 | NT Ntp Ntp | 4.8 | Jan 30 | The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network |
| CVE-2015-8139 | NT Ntp Ntp | 5.3 | Jan 30 | ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors |
| CVE-2015-8138 | NT Ntp Ntp | 5.3 | Jan 30 | NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero |
| CVE-2015-7979 | NT Ntp Ntp | 7.5 | Jan 30 | NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid… |
| CVE-2015-7978 | NT Ntp Ntp | 7.5 | Jan 30 | NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive… |
| CVE-2015-7977 | NT Ntp Ntp | 5.9 | Jan 30 | ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command |