CVE-2020-13817

🗓️ 04 Jun 2020 12:31:55Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 548 Views

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources

Reporter	Title	Published	Views	Family All 104
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-11868, CVE-2020-13817)	8 Jul 202117:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by Network Time Protocol (NTP) vulnerabilities (CVE-2020-11868, CVE-2020-13817)	27 Nov 202002:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in Network Time Protocol (NTP)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities	12 Jan 202110:48	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been fixed in the IBM Security Access Manager and IBM Security Verify Access products	14 Oct 202016:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in ntp (CVE-2020-11868 and CVE-2020-13817).	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in NTPv4 affect AIX (CVE-2020-11868, CVE-2020-13817, and CVE-2020-15025)	26 Oct 202022:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to Using Components with Known Vulnerabilities	30 Oct 202016:18	–	ibm
Tenable Nessus	Amazon Linux 2 : ntp (ALAS-2020-1455)	20 Jul 202000:00	–	nessus
Tenable Nessus	CentOS 7 : ntp (RHSA-2020:2663)	24 Jun 202000:00	–	nessus

NVD

Node

ntp ntpRange<4.2.8

ntp ntpRange4.3.0–4.3.100

ntp ntpMatch4.2.8-

ntp ntpMatch4.2.8p1

ntp ntpMatch4.2.8p1-beta1

ntp ntpMatch4.2.8p1-beta2

ntp ntpMatch4.2.8p1-beta3

ntp ntpMatch4.2.8p1-beta4

ntp ntpMatch4.2.8p1-beta5

ntp ntpMatch4.2.8p1-rc1

ntp ntpMatch4.2.8p1-rc2

ntp ntpMatch4.2.8p10

ntp ntpMatch4.2.8p11

ntp ntpMatch4.2.8p12

ntp ntpMatch4.2.8p13

ntp ntpMatch4.2.8p2

ntp ntpMatch4.2.8p2-rc1

ntp ntpMatch4.2.8p2-rc2

ntp ntpMatch4.2.8p2-rc3

ntp ntpMatch4.2.8p3

ntp ntpMatch4.2.8p3-rc1

ntp ntpMatch4.2.8p3-rc2

ntp ntpMatch4.2.8p3-rc3

ntp ntpMatch4.2.8p4

ntp ntpMatch4.2.8p5

ntp ntpMatch4.2.8p6

ntp ntpMatch4.2.8p7

ntp ntpMatch4.2.8p8

ntp ntpMatch4.2.8p9

Node

netapp cloud_backupMatch-

netapp clustered_data_ontapMatch-

netapp data_ontapMatch-7-mode

netapp element_softwareMatch-

netapp hci_management_nodeMatch-

netapp ontap_toolsMatch-vmware_vsphere

netapp solidfireMatch-

netapp steelstore_cloud_integrated_storageMatch-

Node

netapp hci_compute_node_firmwareMatch-

AND

netapp hci_compute_nodeMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h300e_firmwareMatch-

AND

netapp h300eMatch-

Node

netapp h500e_firmwareMatch-

AND

netapp h500eMatch-

Node

netapp h700e_firmwareMatch-

AND

netapp h700eMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

opensuse leapMatch15.1

opensuse leapMatch15.2

Node

fujitsu m10-1_firmwareRange<xcp2410

AND

fujitsu m10-1Match-

Node

fujitsu m10-4_firmwareRange<xcp2410

AND

fujitsu m10-4Match-

Node

fujitsu m10-4s_firmwareRange<xcp2410

AND

fujitsu m10-4sMatch-

Node

fujitsu m12-1_firmwareRange<xcp2410

AND

fujitsu m12-1Match-

Node

fujitsu m12-2_firmwareRange<xcp2410

AND

fujitsu m12-2Match-

Node

fujitsu m12-2s_firmwareRange<xcp2410

AND

fujitsu m12-2sMatch-

Node

fujitsu m10-4_firmwareRange<xcp3110

AND

fujitsu m10-4Match-

Node

fujitsu m10-4s_firmwareRange<xcp3110

AND

fujitsu m10-4sMatch-

Node

fujitsu m12-1_firmwareRange<xcp3110

AND

fujitsu m12-1Match-

Node

fujitsu m12-2_firmwareRange<xcp3110

AND

fujitsu m12-2Match-

Node

fujitsu m12-2s_firmwareRange<xcp3110

AND

fujitsu m12-2sMatch-

Source	Link
bugs	www.bugs.ntp.org/show_bug.cgi
support	www.support.ntp.org/bin/view/Main/NtpBug3596
security	www.security.netapp.com/advisory/ntap-20200625-0004/
oracle	www.oracle.com/security-alerts/cpujan2022.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00044.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00005.html
security	www.security.gentoo.org/glsa/202007-12

05 May 2025 17:15Current

7.2High risk

Vulners AI Score7.2

CVSS 25.8

CVSS 3.17.4

CVSS 35.9

EPSS0.00348

SSVC

CWE-330