Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
f5F5F5:K000139026
HistoryMar 25, 2024 - 12:00 a.m.

K000139026 : NTP vulnerability CVE-2009-3563

2024-03-2500:00:00
my.f5.com
5
ntp vulnerability
denial of service
mode_private
spoofed packet
cve-2009-3563
ntpd

6.9 Medium

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.963 High

EPSS

Percentile

99.5%

JSON

Security Advisory Description

ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons. (CVE-2009-3563)

Impact

There is no impact; F5 products are not affected by this vulnerability.

Related

f5 2
openvas 38
nessus 51
veracode 1
securityvulns 3
debian 2
redhat 3
freebsd_advisory 1
cisco 1
seebug 1
cert 2
gentoo 1
fedora 3
prion 2
ubuntucve 2
debiancve 2
centos 2
checkpoint_advisories 2
oraclelinux 2
ubuntu 1
slackware 1
cve 2
redhatcve 1
osv 1
vmware 4
f5
f5
SOL10905 - NTP vulnerability - CVE-2009-3563
2010-01-04 00:00:00
K10905 : NTP vulnerability - CVE-2009-3563
2013-07-05 00:00:00
openvas
openvas
FreeBSD Security Advisory (FreeBSD-SA-10:02.ntpd.asc)
2010-01-11 00:00:00
Slackware Advisory SSA:2009-343-01 ntp
2012-09-11 00:00:00
Debian Security Advisory DSA 1948-1 (ntp)
2009-12-14 00:00:00
nessus
nessus
Solaris 10 (sparc) : 143725-01
2018-03-12 00:00:00
AIX 6.1 TL 2 : xntpd (IZ71613)
2013-01-24 00:00:00
AIX 5.3 TL 11 : xntpd (IZ71610)
2013-01-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:42:01
securityvulns
securityvulns
ntp server DoS
2009-12-09 00:00:00
[USN-867-1] Ntp vulnerability
2009-12-09 00:00:00
[SECURITY] [DSA 1992-1] New chrony packages fix denial of service
2010-02-05 00:00:00
debian
debian
[SECURITY] [DSA 1948-1] New ntp packages fix denial of service
2009-12-08 19:07:15
[SECURITY] [DSA 1992-1] New chrony packages fix denial of service
2010-02-04 17:38:45
redhat
redhat
(RHSA-2009:1648) Moderate: ntp security update
2009-12-08 00:00:00
(RHSA-2009:1651) Moderate: ntp security update
2009-12-08 00:00:00
(RHSA-2010:0095) Important: rhev-hypervisor security and bug fix update
2010-02-09 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-10:02.ntpd
2010-01-06 00:00:00
cisco
cisco
Network Time Protocol Package Remote Message Loop Denial of Service Vulnerability
2009-12-08 22:33:40
seebug
seebug
NTP MODE_PRIVATEζŠ₯ζ–‡θΏœη¨‹ζ‹’η»ζœεŠ‘ζΌζ΄ž
2009-12-12 00:00:00
cert
cert
NTP mode 7 denial-of-service vulnerability
2009-12-08 00:00:00
Implementations of UDP-based application protocols are vulnerable to network loops
2024-03-19 00:00:00
gentoo
gentoo
NTP: Denial of service
2010-01-03 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: ntp-4.2.4p8-1.fc12
2009-12-11 18:14:28
[SECURITY] Fedora 11 Update: ntp-4.2.4p7-3.fc11
2009-12-11 18:23:49
[SECURITY] Fedora 10 Update: ntp-4.2.4p7-2.fc10
2009-12-11 18:32:53
prion
prion
Code injection
2009-12-09 18:30:00
Sql injection
2010-02-08 20:30:00
ubuntucve
ubuntucve
CVE-2009-3563
2009-12-08 00:00:00
CVE-2010-0292
2010-02-08 00:00:00
debiancve
debiancve
CVE-2009-3563
2009-12-09 18:30:00
CVE-2010-0292
2010-02-08 20:30:00
centos
centos
ntp security update
2009-12-08 22:33:14
ntp security update
2009-12-08 22:18:02
checkpoint_advisories
checkpoint_advisories
Update Protection against Multiple Vendors NTP Mode 7 Denial of Service
2009-01-25 00:00:00
Multiple Vendors NTP Mode 7 Denial of Service (CVE-2009-3563)
2010-02-02 00:00:00
oraclelinux
oraclelinux
ntp security update
2009-12-08 00:00:00
ntp security update
2009-12-08 00:00:00
ubuntu
ubuntu
Ntp vulnerability
2009-12-08 00:00:00
slackware
slackware
[slackware-security] ntp
2009-12-10 08:39:43
cve
cve
CVE-2009-3563
2009-12-09 18:30:00
CVE-2010-0292
2010-02-08 20:30:00
redhatcve
redhatcve
CVE-2024-2169
2024-04-02 20:21:52
osv
osv
chrony - denial of service
2010-02-04 00:00:00
vmware
vmware
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00

6.9 Medium

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.963 High

EPSS

Percentile

99.5%

JSON
Related for F5:K000139026
f52openvas38nessus51veracode1securityvulns3debian2redhat3freebsd_advisory1cisco1seebug1cert2gentoo1fedora3prion2ubuntucve2debiancve2centos2checkpoint_advisories2oraclelinux2ubuntu1slackware1cve2redhatcve1osv1vmware4