Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-5211
HistoryJan 02, 2014 - 2:59 p.m.

CVE-2013-5211

2014-01-0214:59:00
CWE-20
[email protected]
web.nvd.nist.gov
297
cve-2013-5211
ntp
monlist
ntpd
denial of service
traffic amplification
req_mon_getlist
req_mon_getlist_1
nvd

7.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.967 High

EPSS

Percentile

99.6%

JSON

The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.

References

Related

nessus 34
threatpost 4
checkpoint_advisories 1
suse 1
zdt 1
securityvulns 3
ibm 9
cert 1
freebsd 1
exploitpack 1
packetstorm 1
openvas 16
f5 2
mageia 1
aix 1
amazon 2
checkpoint_security 1
fortinet 1
thn 1
ubuntucve 1
metasploit 1
ics 1
gentoo 1
freebsd_advisory 1
slackware 1
prion 1
oraclelinux 5
debiancve 1
exploitdb 1
vmware 2
nessus
nessus
AIX 6.1 TL 8 : ntp (IV58068)
2014-06-17 00:00:00
Oracle Linux 7 : ntp (ELSA-2016-3612)
2016-09-13 00:00:00
AIX 6.1 TL 7 : ntp (IV58413)
2014-06-17 00:00:00
threatpost
threatpost
Volume of NTP Amplification Attacks Getting Louder
2014-04-29 13:03:29
NTP Amplification Blamed for 400 Gbps DDoS Attack
2014-02-11 12:21:35
PointDNS Recovers from Massive DDoS Attack
2014-05-12 15:35:26
checkpoint_advisories
checkpoint_advisories
NTP Servers Monlist Command Denial of Service (CVE-2013-5211)
2014-01-19 00:00:00
suse
suse
DDoS reflection attacks in ntp
2014-01-20 17:05:38
zdt
zdt
NTP ntpd monlist Query Reflection - Denial of Service
2014-04-29 00:00:00
securityvulns
securityvulns
ntp traffic amplification
2014-01-14 00:00:00
[security bulletin] HPSBUX02960 SSRT101419 rev.1 - HP-UX Running NTP, Remote Denial of Service (DoS)
2014-01-14 00:00:00
TA14-013A: NTP Amplification Attacks Using CVE-2013-5211
2014-01-14 00:00:00
ibm
ibm
Security Bulletin: NTP vulnerability in Network Intrusion Prevention System (CVE-2013-5211)
2022-02-23 19:48:26
Security Bulletin: The IBM Chassis Management Module (CMM) is affected by a vulnerability in NTP server (CVE-2013-5211)
2019-01-31 01:25:01
Security Bulletin: IBM Flex System Manager (FSM) is affected by vulnerability (CVE-2013-5211)
2019-01-31 01:25:01
cert
cert
NTP can be abused to amplify denial-of-service attack traffic
2014-01-10 00:00:00
freebsd
freebsd
ntpd DRDoS / Amplification Attack using ntpdc monlist command
2014-01-01 00:00:00
exploitpack
exploitpack
NTP ntpd monlist Query Reflection - Denial of Service
2014-04-28 00:00:00
packetstorm
packetstorm
NTP Amplification Denial Of Service Tool
2014-07-16 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2020-1314)
2020-03-24 00:00:00
Juniper Networks Junos OS NTP Server Amplification Denial of Service Vulnerability
2014-07-31 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0937-1)
2021-06-09 00:00:00
f5
f5
SOL15154 - NTP vulnerability CVE-2013-5211
2014-04-10 00:00:00
K15154 : NTP vulnerability CVE-2013-5211
2014-04-10 00:00:00
mageia
mageia
Updated ntp packages work around security vulnerability
2014-01-31 20:44:56
aix
aix
Network Time Protocol (NTP) vulnerability in AIX,Network Time Protocol (NTP) vulnerability in VIOS
2014-06-12 16:24:51
amazon
amazon
Medium: ntp
2021-09-08 23:35:00
Medium: ntp
2018-05-10 17:01:00
checkpoint_security
checkpoint_security
Blocking NTP access on Gaia OS / IPSO OS (CVE-2013-5211)
2014-03-01 22:00:00
fortinet
fortinet
FortiAnalyzer could potentially be used in NTP amplification attacks
2020-06-22 00:00:00
thn
thn
Abusing Network Time Protocol (NTP) to perform massive Reflection DDoS attack
2014-01-02 20:25:00
ubuntucve
ubuntucve
CVE-2013-5211
2014-01-02 00:00:00
metasploit
metasploit
NTP Monitor List Scanner
2010-01-27 23:25:17
ics
ics
NTP Reflection Attack
2018-09-06 12:00:00
gentoo
gentoo
NTP: Traffic amplification
2014-01-16 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:02.ntpd
2014-01-14 00:00:00
slackware
slackware
ntp
2014-02-13 16:38:35
prion
prion
Security feature bypass
2014-01-02 14:59:00
oraclelinux
oraclelinux
ntp security update
2016-09-09 00:00:00
ntp security update
2016-09-09 00:00:00
ntp security update
2018-12-19 00:00:00
debiancve
debiancve
CVE-2013-5211
2014-01-02 14:59:00
exploitdb
exploitdb
NTP ntpd monlist Query Reflection - Denial of Service
2014-04-28 00:00:00
vmware
vmware
VMware vSphere updates to third party libraries
2014-03-11 00:00:00
VMware vSphere updates to third party libraries
2014-03-11 00:00:00

7.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.967 High

EPSS

Percentile

99.6%

JSON
Related for CVE-2013-5211
nessus34threatpost4checkpoint_advisories1suse1zdt1securityvulns3ibm9cert1freebsd1exploitpack1packetstorm1openvas16f52mageia1aix1amazon2checkpoint_security1fortinet1thn1ubuntucve1metasploit1ics1gentoo1freebsd_advisory1slackware1prion1oraclelinux5debiancve1exploitdb1vmware2