Browse CVEs

MEDIUM 6.4 CVE-2023-26555 praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GP… Ntp Mitigation only Fix from $1,6002023-04-11 MEDIUM 5.6 CVE-2023-26551 mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a client ntpq p… Ntp Mitigation only Fix from $1,6002023-04-11 MEDIUM 5.6 CVE-2023-26552 mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq … Ntp Mitigation only Fix from $1,6002023-04-11 MEDIUM 5.6 CVE-2023-26553 mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client … Ntp Mitigation only Fix from $1,6002023-04-11 MEDIUM 5.6 CVE-2023-26554 mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a client ntpq… Ntp Mitigation only Fix from $1,6002023-04-11 HIGH 7.4 CVE-2020-13817 ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by pred… Ntp 4.2.8 / 4.3.100+ Fix from $1,9502020-06-04 MEDIUM 5.3 CVE-2018-8956 ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadc… Ntp Mitigation only Fix from $1,6002020-05-06 MEDIUM 6.5 CVE-2015-7851 Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\… Ntp 4.2.8 / 4.3.77+ Fix from $1,6002020-01-28 HIGH 8.1 CVE-2019-11331 Network Time Protocol (NTP), as specified in RFC 5905, uses port 123 even for modes where a fixed port number is not required, which makes it easier … Ntp Mitigation only Fix from $1,9502019-04-18 CRITICAL 9.8 CVE-2018-12327EPSS 29% Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges v… Ntp No fix yet Fix from $2,3002018-06-20 MEDIUM 5.3 CVE-2018-7170 ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ep… Ntp 1.1.6-6931-3 / 2.2.3-1505+ Fix from $1,6002018-03-06 CRITICAL 9.8 CVE-2015-7853EPSS 12% The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code o… Ntp 4.2.8 / 4.3.77+ Fix from $2,3002017-08-07 HIGH 8.8 CVE-2015-7849EPSS 17% Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbit… Ntp 4.2.8 / 4.3.77+ Fix from $1,9502017-08-07 HIGH 8.8 CVE-2015-7854EPSS 15% Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to ca… Ntp 4.2.8 / 4.3.77+ Fix from $1,9502017-08-07 HIGH 8.8 CVE-2017-6458EPSS 7% Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecifi… Ntp 4.2.8 / 4.3.94+ Fix from $1,9502017-03-27 HIGH 8.8 CVE-2017-6460 Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified imp… Ntp Patch available Fix from $1,9502017-03-27 HIGH 7.8 CVE-2017-6451 The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of th… Ntp Patch available Fix from $1,9502017-03-27 HIGH 7.8 CVE-2017-6452 Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact vi… Ntp Patch available Fix from $1,9502017-03-27 HIGH 7.8 CVE-2017-6462 Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users… Ntp Patch available Fix from $1,9502017-03-27 HIGH 7.0 CVE-2017-6455 NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPI_DLLS environment variab… Ntp Patch available Fix from $1,9502017-03-27 MEDIUM 6.5 CVE-2017-6463EPSS 5% NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a… Ntp Mitigation only Fix from $1,6002017-03-27 MEDIUM 6.5 CVE-2017-6464EPSS 5% NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration dire… Ntp Patch available Fix from $1,6002017-03-27 MEDIUM 5.5 CVE-2017-6459 The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argumen… Ntp Mitigation only Fix from $1,6002017-03-27 MEDIUM 5.9 CVE-2016-2519EPSS 7% ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, w… Ntp after 4.2.8 Fix from $1,6002017-01-30 MEDIUM 5.3 CVE-2016-2516EPSS 9% NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service (ntpd abort) by using the sam… Ntp after 4.2.8 Fix from $1,6002017-01-30 MEDIUM 5.3 CVE-2016-2517EPSS 9% NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging kno… Ntp after 4.2.8 Fix from $1,6002017-01-30 HIGH 7.5 CVE-2015-7978EPSS 10% NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, whi… Ntp after 4.2.8 Fix from $1,9502017-01-30 HIGH 7.5 CVE-2015-7979EPSS 12% NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broa… Ntp after 4.2.8 Fix from $1,9502017-01-30 MEDIUM 6.2 CVE-2015-7975 The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to ca… Ntp after 4.2.8 Fix from $1,6002017-01-30 MEDIUM 5.9 CVE-2015-8158EPSS 8% The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinit… Ntp after 4.2.8 Fix from $1,6002017-01-30