Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ntp ntp 4.3.38 vulnerabilities and exploits

(subscribe to this query)
7.1
CVSSv2
CVE-2016-2516
NTP prior to 4.2.8p7 and 4.3.x prior to 4.3.92, when mode7 is enabled, allows remote malicious users to cause a denial of service (ntpd abort) by using the same IP address multiple times in an unconfig directive.
Ntp NtpNtp Ntp 4.3.90Ntp Ntp 4.3.91Ntp Ntp 4.3.14Ntp Ntp 4.3.15Ntp Ntp 4.3.22Ntp Ntp 4.3.23Ntp Ntp 4.3.3Ntp Ntp 4.3.30Ntp Ntp 4.3.37Ntp Ntp 4.3.38Ntp Ntp 4.3.45Ntp Ntp 4.3.46Ntp Ntp 4.3.52Ntp Ntp 4.3.53Ntp Ntp 4.3.6Ntp Ntp 4.3.60Ntp Ntp 4.3.68Ntp Ntp 4.3.69Ntp Ntp 4.3.75Ntp Ntp 4.3.76Ntp Ntp 4.3.82
4.9
CVSSv2
CVE-2016-2517
NTP prior to 4.2.8p7 and 4.3.x prior to 4.3.92 allows remote malicious users to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, contr...
Ntp NtpNtp Ntp 4.3.10Ntp Ntp 4.3.11Ntp Ntp 4.3.18Ntp Ntp 4.3.19Ntp Ntp 4.3.25Ntp Ntp 4.3.26Ntp Ntp 4.3.33Ntp Ntp 4.3.34Ntp Ntp 4.3.40Ntp Ntp 4.3.41Ntp Ntp 4.3.48Ntp Ntp 4.3.49Ntp Ntp 4.3.5Ntp Ntp 4.3.56Ntp Ntp 4.3.57Ntp Ntp 4.3.63Ntp Ntp 4.3.64Ntp Ntp 4.3.71Ntp Ntp 4.3.72Ntp Ntp 4.3.79Ntp Ntp 4.3.8
4.9
CVSSv2
CVE-2016-2519
ntpd in NTP prior to 4.2.8p7 and 4.3.x prior to 4.3.92 allows remote malicious users to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value.
Ntp NtpNtp Ntp 4.3.11Ntp Ntp 4.3.12Ntp Ntp 4.3.19Ntp Ntp 4.3.2Ntp Ntp 4.3.27Ntp Ntp 4.3.28Ntp Ntp 4.3.34Ntp Ntp 4.3.35Ntp Ntp 4.3.41Ntp Ntp 4.3.42Ntp Ntp 4.3.5Ntp Ntp 4.3.50Ntp Ntp 4.3.57Ntp Ntp 4.3.58Ntp Ntp 4.3.64Ntp Ntp 4.3.65Ntp Ntp 4.3.72Ntp Ntp 4.3.73Ntp Ntp 4.3.8Ntp Ntp 4.3.80Ntp Ntp 4.3.87
2.1
CVSSv2
CVE-2017-6459
The Windows installer for NTP prior to 4.2.8p10 and 4.3.x prior to 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes.
Ntp Ntp 4.3.14Ntp Ntp 4.3.15Ntp Ntp 4.3.21Ntp Ntp 4.3.22Ntp Ntp 4.3.29Ntp Ntp 4.3.3Ntp Ntp 4.3.30Ntp Ntp 4.3.37Ntp Ntp 4.3.38Ntp Ntp 4.3.44Ntp Ntp 4.3.45Ntp Ntp 4.3.51Ntp Ntp 4.3.52Ntp Ntp 4.3.53Ntp Ntp 4.3.6Ntp Ntp 4.3.60Ntp Ntp 4.3.67Ntp Ntp 4.3.68Ntp Ntp 4.3.75Ntp Ntp 4.3.76Ntp Ntp 4.3.82Ntp Ntp 4.3.83
4.6
CVSSv2
CVE-2017-6451
The mx4200_send function in the legacy MX4200 refclock in NTP prior to 4.2.8p10 and 4.3.x prior to 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds...
Ntp Ntp 4.3.0Ntp Ntp 4.3.15Ntp Ntp 4.3.16Ntp Ntp 4.3.17Ntp Ntp 4.3.23Ntp Ntp 4.3.24Ntp Ntp 4.3.30Ntp Ntp 4.3.31Ntp Ntp 4.3.38Ntp Ntp 4.3.39Ntp Ntp 4.3.4Ntp Ntp 4.3.46Ntp Ntp 4.3.47Ntp Ntp 4.3.53Ntp Ntp 4.3.54Ntp Ntp 4.3.61Ntp Ntp 4.3.62Ntp Ntp 4.3.69Ntp Ntp 4.3.7Ntp Ntp 4.3.76Ntp Ntp 4.3.77Ntp Ntp 4.3.84
4.6
CVSSv2
CVE-2017-6462
Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP prior to 4.2.8p10 and 4.3.x prior to 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.
Ntp Ntp 4.3.0Ntp Ntp 4.3.1Ntp Ntp 4.3.10Ntp Ntp 4.3.17Ntp Ntp 4.3.18Ntp Ntp 4.3.24Ntp Ntp 4.3.25Ntp Ntp 4.3.32Ntp Ntp 4.3.33Ntp Ntp 4.3.4Ntp Ntp 4.3.40Ntp Ntp 4.3.47Ntp Ntp 4.3.48Ntp Ntp 4.3.55Ntp Ntp 4.3.56Ntp Ntp 4.3.62Ntp Ntp 4.3.63Ntp Ntp 4.3.7Ntp Ntp 4.3.70Ntp Ntp 4.3.78Ntp Ntp 4.3.79Ntp Ntp 4.3.85
4
CVSSv2
CVE-2017-6463
NTP prior to 4.2.8p10 and 4.3.x prior to 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.
Ntp Ntp 4.3.13Ntp Ntp 4.3.14Ntp Ntp 4.3.20Ntp Ntp 4.3.21Ntp Ntp 4.3.28Ntp Ntp 4.3.29Ntp Ntp 4.3.36Ntp Ntp 4.3.37Ntp Ntp 4.3.43Ntp Ntp 4.3.44Ntp Ntp 4.3.50Ntp Ntp 4.3.51Ntp Ntp 4.3.52Ntp Ntp 4.3.59Ntp Ntp 4.3.6Ntp Ntp 4.3.66Ntp Ntp 4.3.67Ntp Ntp 4.3.74Ntp Ntp 4.3.75Ntp Ntp 4.3.81Ntp Ntp 4.3.82Ntp Ntp 4.3.89
4
CVSSv2
CVE-2017-6464
NTP prior to 4.2.8p10 and 4.3.x prior to 4.3.94 allows remote malicious users to cause a denial of service (ntpd crash) via a malformed mode configuration directive.
Ntp Ntp 4.3.1Ntp Ntp 4.3.10Ntp Ntp 4.3.17Ntp Ntp 4.3.18Ntp Ntp 4.3.24Ntp Ntp 4.3.25Ntp Ntp 4.3.32Ntp Ntp 4.3.33Ntp Ntp 4.3.4Ntp Ntp 4.3.40Ntp Ntp 4.3.47Ntp Ntp 4.3.48Ntp Ntp 4.3.55Ntp Ntp 4.3.56Ntp Ntp 4.3.62Ntp Ntp 4.3.63Ntp Ntp 4.3.7Ntp Ntp 4.3.70Ntp Ntp 4.3.71Ntp Ntp 4.3.78Ntp Ntp 4.3.79Ntp Ntp 4.3.85
4.6
CVSSv2
CVE-2017-6452
Stack-based buffer overflow in the Windows installer for NTP prior to 4.2.8p10 and 4.3.x prior to 4.3.94 allows local users to have unspecified impact via an application path on the command line.
Ntp Ntp 4.3.11Ntp Ntp 4.3.12Ntp Ntp 4.3.19Ntp Ntp 4.3.2Ntp Ntp 4.3.26Ntp Ntp 4.3.27Ntp Ntp 4.3.34Ntp Ntp 4.3.35Ntp Ntp 4.3.41Ntp Ntp 4.3.42Ntp Ntp 4.3.49Ntp Ntp 4.3.5Ntp Ntp 4.3.50Ntp Ntp 4.3.57Ntp Ntp 4.3.58Ntp Ntp 4.3.64Ntp Ntp 4.3.65Ntp Ntp 4.3.72Ntp Ntp 4.3.73Ntp Ntp 4.3.8Ntp Ntp 4.3.80Ntp Ntp 4.3.87
4.4
CVSSv2
CVE-2017-6455
NTP prior to 4.2.8p10 and 4.3.x prior to 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPI_DLLS environment variable.
Ntp Ntp 4.3.10Ntp Ntp 4.3.11Ntp Ntp 4.3.18Ntp Ntp 4.3.19Ntp Ntp 4.3.2Ntp Ntp 4.3.26Ntp Ntp 4.3.27Ntp Ntp 4.3.33Ntp Ntp 4.3.34Ntp Ntp 4.3.40Ntp Ntp 4.3.41Ntp Ntp 4.3.42Ntp Ntp 4.3.49Ntp Ntp 4.3.5Ntp Ntp 4.3.56Ntp Ntp 4.3.57Ntp Ntp 4.3.64Ntp Ntp 4.3.65Ntp Ntp 4.3.71Ntp Ntp 4.3.72Ntp Ntp 4.3.79Ntp Ntp 4.3.8
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook