Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

CVE-2016-4954 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3

CVE-2016-4954

The process_packet function in ntp_proto.c in ntpd in NTP 4.x prior to 4.2.8p8 allows remote malicious users to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an ...
Ntp NtpNtp Ntp 4.2.8Oracle Solaris 10Oracle Solaris 11.3Suse Manager 2.1Suse Manager Proxy 2.1Suse Openstack Cloud 5Opensuse Leap 42.1Opensuse Opensuse 13.2Suse Linux Enterprise Desktop 12Suse Linux Enterprise Server 11Suse Linux Enterprise Server 12
5.3
CVSSv3

CVE-2016-4956

ntpd in NTP 4.x prior to 4.2.8p8 allows remote malicious users to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.
Ntp NtpNtp Ntp 4.2.8Oracle Solaris 10Oracle Solaris 11.3Suse Manager Proxy 2.1Suse Openstack Cloud 5Novell Suse Manager 2.1Opensuse Leap 42.1Opensuse Opensuse 13.2Suse Linux Enterprise Desktop 12Suse Linux Enterprise Server 11Suse Linux Enterprise Server 12
5.9
CVSSv3

CVE-2016-4955

ntpd in NTP 4.x prior to 4.2.8p8, when autokey is enabled, allows remote malicious users to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.
Ntp NtpNtp Ntp 4.2.8Oracle Solaris 10Oracle Solaris 11.3Suse Manager Proxy 2.1Suse Openstack Cloud 5Novell Suse Manager 2.1Opensuse Leap 42.1Opensuse Opensuse 13.2Suse Linux Enterprise Desktop 12Suse Linux Enterprise Server 11Suse Linux Enterprise Server 12
7.5
CVSSv3

CVE-2016-4957

ntpd in NTP prior to 4.2.8p8 allows remote malicious users to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.
Ntp Ntp 4.2.8Ntp Ntp 4.3.92Oracle Solaris 10Oracle Solaris 11.3Suse Manager Proxy 2.1Suse Openstack Cloud 5Novell Suse Manager 2.1Opensuse Leap 42.1Opensuse Opensuse 13.2Suse Linux Enterprise Desktop 12Suse Linux Enterprise Server 11Suse Linux Enterprise Server 12
7.5
CVSSv3

CVE-2016-4953

ntpd in NTP 4.x prior to 4.2.8p8 allows remote malicious users to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.
Ntp NtpNtp Ntp 4.2.8Oracle Solaris 10Oracle Solaris 11.3Suse Manager 2.1Suse Manager Proxy 2.1Suse Openstack Cloud 5Opensuse Leap 42.1Opensuse Opensuse 13.2Suse Linux Enterprise Desktop 12Suse Linux Enterprise Server 11Suse Linux Enterprise Server 12
5.3
CVSSv3

CVE-2015-8139

ntpq in NTP prior to 4.2.8p7 allows remote malicious users to obtain origin timestamps and then impersonate peers via unspecified vectors.
Ntp Ntp
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-21317CVE-2025-23940buffer overflowCVE-2025-21335CVE-2025-23860CVE-2024-57704SSTIwirelessCVE-2019-3309
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook