Published: 30/01/2017 Updated: 21/11/2017

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2

VMScore: 436

Vector: AV:N/AC:H/Au:S/C:N/I:N/A:C

ntpd in NTP prior to 4.2.8p7 and 4.3.x prior to 4.3.92 allows remote malicious users to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ntp ntp
ntp ntp 4.3.11
ntp ntp 4.3.12
ntp ntp 4.3.19
ntp ntp 4.3.2
ntp ntp 4.3.27
ntp ntp 4.3.28
ntp ntp 4.3.34
ntp ntp 4.3.35
ntp ntp 4.3.41
ntp ntp 4.3.42
ntp ntp 4.3.5
ntp ntp 4.3.50
ntp ntp 4.3.57
ntp ntp 4.3.58
ntp ntp 4.3.64
ntp ntp 4.3.65
ntp ntp 4.3.72
ntp ntp 4.3.73
ntp ntp 4.3.8
ntp ntp 4.3.80
ntp ntp 4.3.87
ntp ntp 4.3.88
ntp ntp 4.3.89
ntp ntp 4.3.90
ntp ntp 4.3.13
ntp ntp 4.3.14
ntp ntp 4.3.20
ntp ntp 4.3.21
ntp ntp 4.3.29
ntp ntp 4.3.3
ntp ntp 4.3.36
ntp ntp 4.3.37
ntp ntp 4.3.43
ntp ntp 4.3.44
ntp ntp 4.3.51
ntp ntp 4.3.52
ntp ntp 4.3.59
ntp ntp 4.3.6
ntp ntp 4.3.66
ntp ntp 4.3.67
ntp ntp 4.3.68
ntp ntp 4.3.74
ntp ntp 4.3.75
ntp ntp 4.3.81
ntp ntp 4.3.82
ntp ntp 4.3.9
ntp ntp 4.3.91
ntp ntp 4.3.0
ntp ntp 4.3.15
ntp ntp 4.3.16
ntp ntp 4.3.22
ntp ntp 4.3.23
ntp ntp 4.3.30
ntp ntp 4.3.31
ntp ntp 4.3.38
ntp ntp 4.3.39
ntp ntp 4.3.45
ntp ntp 4.3.46
ntp ntp 4.3.47
ntp ntp 4.3.53
ntp ntp 4.3.54
ntp ntp 4.3.60
ntp ntp 4.3.61
ntp ntp 4.3.69
ntp ntp 4.3.7
ntp ntp 4.3.76
ntp ntp 4.3.77
ntp ntp 4.3.83
ntp ntp 4.3.84
ntp ntp 4.3.1
ntp ntp 4.3.10
ntp ntp 4.3.17
ntp ntp 4.3.18
ntp ntp 4.3.24
ntp ntp 4.3.25
ntp ntp 4.3.26
ntp ntp 4.3.32
ntp ntp 4.3.33
ntp ntp 4.3.4
ntp ntp 4.3.40
ntp ntp 4.3.48
ntp ntp 4.3.49
ntp ntp 4.3.55
ntp ntp 4.3.56
ntp ntp 4.3.62
ntp ntp 4.3.63
ntp ntp 4.3.70
ntp ntp 4.3.71
ntp ntp 4.3.78
ntp ntp 4.3.79
ntp ntp 4.3.85
ntp ntp 4.3.86

Several security issues were fixed in NTP ...

ntpd in NTP before 428p7 and 43x before 4392 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value ...

CWE-119 https://www.kb.cert.org/vuls/id/718152 http://support.ntp.org/bin/view/Main/NtpBug3008 http://www.securityfocus.com/bid/88204 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html https://security.gentoo.org/glsa/201607-15 http://www.securitytracker.com/id/1035705 https://security.netapp.com/advisory/ntap-20171004-0002/https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc https://nvd.nist.gov https://usn.ubuntu.com/3349-1/https://www.kb.cert.org/vuls/id/718152

Get Started

CVE-2016-2519

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect