CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

NTP » NTP » 4.3.39 : Security Vulnerabilities

Cpe Name:cpe:/a:ntp:ntp:4.3.39
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2018-7170 19 2018-03-06 2018-06-27
4.0
None Remote Low Single system None Partial None
ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.
2 CVE-2017-6464 20 DoS 2017-03-27 2018-04-11
4.0
None Remote Low Single system None None Partial
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.
3 CVE-2017-6463 20 DoS 2017-03-27 2018-04-11
4.0
None Remote Low Single system None None Partial
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.
4 CVE-2017-6462 119 Overflow 2017-03-27 2018-04-11
4.6
None Local Low Not required Partial Partial Partial
Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.
5 CVE-2017-6460 119 Overflow 2017-03-27 2017-10-23
6.5
None Remote Low Single system Partial Partial Partial
Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.
6 CVE-2017-6459 119 Overflow 2017-03-27 2017-10-23
2.1
None Local Low Not required None None Partial
The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes.
7 CVE-2017-6458 119 Overflow 2017-03-27 2017-10-23
6.5
None Remote Low Single system Partial Partial Partial
Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.
8 CVE-2017-6455 94 +Priv 2017-03-27 2017-10-23
4.4
None Local Medium Not required Partial Partial Partial
NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPI_DLLS environment variable.
9 CVE-2017-6452 119 Overflow 2017-03-27 2017-10-23
4.6
None Local Low Not required Partial Partial Partial
Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line.
10 CVE-2017-6451 787 Exec Code 2017-03-27 2017-10-23
4.6
None Local Low Not required Partial Partial Partial
The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.
11 CVE-2016-2519 119 DoS Overflow 2017-01-30 2017-11-20
4.9
None Remote High Single system None None Complete
ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value.
12 CVE-2016-2518 125 2017-01-30 2018-05-17
5.0
None Remote Low Not required None None Partial
The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
13 CVE-2016-2517 20 DoS 2017-01-30 2017-11-20
4.9
None Remote High Single system None None Complete
NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, controlkey, or requestkey. NOTE: this vulnerability exists because of a CVE-2016-2516 regression.
14 CVE-2016-2516 20 DoS 2017-01-30 2017-11-20
7.1
None Remote Medium Not required None None Complete
NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service (ntpd abort) by using the same IP address multiple times in an unconfig directive.
15 CVE-2015-8158 DoS 2017-01-30 2018-01-04
4.3
None Remote Medium Not required None None Partial
The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values.
16 CVE-2015-8138 20 Bypass 2017-01-30 2017-11-20
5.0
None Remote Low Not required None Partial None
NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.
17 CVE-2015-7979 19 DoS 2017-01-30 2018-05-17
5.0
None Remote Low Not required None None Partial
NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.
18 CVE-2015-7978 400 DoS 2017-01-30 2018-05-17
5.0
None Remote Low Not required None None Partial
NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.
19 CVE-2015-7977 476 DoS 2017-01-30 2018-05-17
4.3
None Remote Medium Not required None None Partial
ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
20 CVE-2015-7976 254 2017-01-30 2017-11-20
4.0
None Remote Low Single system None Partial None
The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.
21 CVE-2015-7975 119 DoS Overflow 2017-01-30 2017-11-20
2.1
None Local Low Not required None None Partial
The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).
22 CVE-2015-7974 254 2016-01-26 2018-01-04
2.1
None Remote High Single system None Partial None
NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
23 CVE-2015-7973 254 2017-01-30 2017-11-20
5.8
None Remote Medium Not required None Partial Partial
NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.
24 CVE-2015-7871 287 Bypass 2017-08-07 2017-11-09
7.5
None Remote Low Not required Partial Partial Partial
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.
25 CVE-2015-7855 20 DoS 2017-08-07 2017-11-09
4.0
None Remote Low Single system None None Partial
The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.
26 CVE-2015-7854 119 DoS Exec Code Overflow 2017-08-07 2017-11-09
6.5
None Remote Low Single system Partial Partial Partial
Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.
27 CVE-2015-7853 119 DoS Exec Code Overflow 2017-08-07 2017-11-09
7.5
None Remote Low Not required Partial Partial Partial
The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value.
28 CVE-2015-7852 20 DoS 2017-08-07 2018-05-17
4.3
None Remote Medium Not required None None Partial
ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets.
29 CVE-2015-7850 119 DoS Overflow 2017-08-07 2017-11-09
4.0
None Remote Low Single system None None Partial
ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file.
30 CVE-2015-7849 416 DoS Exec Code 2017-08-07 2017-11-09
6.5
None Remote Low Single system Partial Partial Partial
Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.
31 CVE-2015-7705 20 2017-08-07 2017-11-14
7.5
None Remote Low Not required Partial Partial Partial
The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.
32 CVE-2015-7704 20 DoS 2017-08-07 2018-05-17
5.0
None Remote Low Not required None None Partial
The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.
33 CVE-2015-7703 20 2017-07-24 2018-05-17
5.8
None Remote Medium Not required None Partial Partial
The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.
34 CVE-2015-7702 20 DoS 2017-08-07 2018-05-17
4.0
None Remote Low Single system None None Partial
The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.
35 CVE-2015-7701 399 DoS 2017-08-07 2018-05-17
7.8
None Remote Low Not required None None Complete
Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).
36 CVE-2015-7692 20 DoS 2017-08-07 2018-05-17
5.0
None Remote Low Not required None None Partial
The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.
37 CVE-2015-7691 20 DoS 2017-08-07 2018-05-17
5.0
None Remote Low Not required None None Partial
The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations. NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.
Total number of vulnerabilities : 37   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.