Denial Of Service (DoS)

Network Time Protocol NTP is vulnerable to denial of service DOS attacks. This occurs in the NTP server's parsing of configuration directives. A remote, authenticated attacker could cause ntpd to crash by sending a crafted message...

Denial Of Service (DoS)

NTP is vulnerable to denial of service attacks. a remote, unauthenticated attacker can send a specially crafted packet to trigger a null pointer dereference and cause the ntpd daemon to crash causing denial of service conditions...

Denial Of Service (DoS)

NTP is vulnerable to denial of service attacks. A remote, unauthenticated attacker could send a specially crafted packet to trigger an error in selecting the proper interface and temporarily prevent the target ntpd daemon from sending new requests leading to denial of service conditions. Affected...

Denial Of Service (DoS)

NTP is vulnerable to denial of service attacks. A remote, unauthenticated attacker can send a specially crafted control mode packet to set and unset ntpd traps to obtain potentially sensitive information or conduct denial of service amplification attacks...

Denial Of Service (DoS)

NTP is vulnerable to denial of service attacks. A remote, unauthenticated attacker could set the jitter value to be higher than expected causing an error in the calculation of root sync delay leading to denial of service conditions. Affected component is Initial Sync Calculation...

Man-In-The-Middle (MitM)

The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by...

Insufficient Entropy In Key Generation Algorithm

The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by...

Man-in-the-Middle (MitM)

The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by...

Sensitive Information Leak

ntp is vulnerable to sensitive information disclosure. It is possible due to missing validation of vallen value in ntpcrypto.c when the decryption of a secret received from an NTP server is performed, leading to a stack-based buffer overflow and crashing the NTP client...

Improper Input Validation And Arbitary Code Injection

The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by...

Denial Of Service (DoS)

ntp is vulnerable to denial of service DoS. The vulnerability exists as it is possible to send a crypto NAK packet from a spoofed source address of an associated peer...

Information Disclosure

ntp is vulnerable to information disclosure. The vulnerability exists as the message digest key is retrievable from the flaw of the message authentication functionality of libntp...

Denial Of Service (DoS)

ntp is vulnerable to denial of service DoS. The vulnerability exists through a spoofed packet from a legitimate ntpd server...

Denial Of Service (DoS)

ntp is vulnerable to denial of service DoS. The vulnerability exists through an out-of-bounds reference from an addpeer request, with a large hmode value...

Denial Of Service (DoS)

ntp is vulnerable to denial of service. A stack-based buffer overflow flaw was found in the way ntpd processed ntpdc reslist commands that queried restriction lists with a large amount of entries. A remote attacker could use this flaw to crash ntpd...

Denial Of Service (DoS)

ntp is vulnerable to denial of service. A memory leak flaw was found in ntpd's CRYPTOASSOC. If ntpd was configured to use autokey authentication, an attacker could send packets to ntpd that would, after several days of ongoing attack, cause it to run out of memory...

Denial Of Service (DoS)

ntp is vulnerable to denial of service. The fix for CVE-2014-9750 was incomplete which resulted in incorrect value length checks in ntpcrypto.c. A packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a...

Denial Of Service (DoS)

ntp is vulnerable to denial of service. The fix for CVE-2014-9750 was incomplete which resulted in incorrect value length checks in ntpcrypto.c. A packet with particular autokey operations that contained malicious data was not always being completely validated. A remote attacker could use a...

Arbitrary File Write

ntp is vulnerable to arbitrary file write. Remote attackers with knowledge of remote configuration password and an IP address permitted to send configuration requests are able to write arbitrary files via the :config command...

Denial Of Service (DoS)

ntp is vulnerable to denial of service. It was discovered that the sntp utility could become unresponsive due to being caught in an infinite loop when processing a crafted NTP packet...