CLSA-2026-1777453146 ntp: Fix of 2 CVEs

🗓️ 02 May 2026 00:51:53Reported by GoogleType

osv🔗 osv.dev👁 2 Views

NTP fixes two CVEs: unauthenticated zero-origin packet resets interleave; NULL pointer on mode six control packet.

Reporter	Title	Published	Views	Family All 188
IBM Security Bulletins	Security Bulletin: Vulnerabilities in ntp affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems	7 Dec 202322:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in NTP	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in NTP, OpenSSL and Intel CPU's affect IBM Netezza Firmware Diagnostics.	18 Oct 201903:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in glib2, libxml2 and ntp	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in NTP affects AIX (CVE-2019-8936)	14 Jul 202015:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in NTP affect QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module for IBM BladeCenter and IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in NTP affect AIX	14 Aug 201821:30	–	ibm
GithubExploit	Exploit for NULL Pointer Dereference in Netapp Clustered_Data_Ontap	26 Apr 202011:07	–	githubexploit
FreeBSD	ntp -- multiple vulnerabilities	27 Feb 201800:00	–	freebsd

Source	Link
errata	www.errata.tuxcare.com/els_os/centos6els/CLSA-2026-1777453146.html

01 Jun 2026 00:33Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

EPSS0.23878