Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2015-3405

🗓️ 09 Aug 2017 16:29:00Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 15 Views

ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 generates weak MD5 key

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index
31 Jan 202100:10
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in NTP affect IBM Security Network Protection (CVE-2015-1798, CVE-2015-1799, and CVE-2015-3405)
16 Jun 201821:30
–ibm
IBM Security Bulletins		Security Bulletin: IBM Security Access Manager for Mobile is affected by multiple NTP vulnerabilities
16 Jun 201821:39
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance
17 Jun 201822:33
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in Network Time Protocol (NTP) affect PowerKVM
18 Jun 201801:30
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in ntp affect Power Hardware Management Console (CVE-2015-1798 CVE-2015-1799 CVE-2015-3405)
23 Sep 202101:31
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in GNU C Library (glibc), OpenSSL and NTP affect IBM Flex System Chassis Management Module (CMM)
31 Jan 201902:10
–ibm
IBM Security Bulletins		Security Bulletin: IBM Security Access Manager for Web is affected by multiple NTP vulnerabilities
16 Jun 201821:38
–ibm
Amazon		Low: ntp
2 Sep 201500:00
–amazon
Tenable Nessus		Amazon Linux AMI : ntp (ALAS-2015-593)
3 Sep 201500:00
–nessus
Rows per page
NVD
Node
ntpntpMatch4.2.8p1
OR
ntpntpMatch4.2.8p2
OR
ntpntpMatch4.2.8p2-rc1
OR
ntpntpMatch4.3.0
OR
ntpntpMatch4.3.1
OR
ntpntpMatch4.3.2
OR
ntpntpMatch4.3.3
OR
ntpntpMatch4.3.4
OR
ntpntpMatch4.3.5
OR
ntpntpMatch4.3.6
OR
ntpntpMatch4.3.7
OR
ntpntpMatch4.3.8
OR
ntpntpMatch4.3.9
OR
ntpntpMatch4.3.10
OR
ntpntpMatch4.3.11
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
Node
opensusesuse_linux_enterprise_serverMatch11.0sp3
OR
opensuse_projectsuse_linux_enterprise_desktopMatch11.0sp3
OR
susesuse_linux_enterprise_serverMatch11.0sp3vmware
Node
fedoraprojectfedoraMatch21
Node
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_for_ibm_z_systemsMatch6.0
OR
redhatenterprise_linux_for_power_big_endianMatch6.0
OR
redhatenterprise_linux_for_scientific_computingMatch6.0
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_server_from_rhui_6Match6.0
OR
redhatenterprise_linux_workstationMatch6.0

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
13 May 2026 00:24Current
7.3High risk
Vulners AI Score7.3
CVSS 25
CVSS 37.5
EPSS0.16556
CWE-331
ntp-keygenntp 4.2.8px4.2.8p2-rc24.3.x4.3.12weak md5 keysinsufficient entropy
15