CVE-2016-2519

ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service ntpd abort by a large request data value, which triggers the ctlgetitem function to return a NULL value...

CVE-2016-2516

NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service ntpd abort by using the same IP address multiple times in an unconfig directive...

CVE-2016-2519

CVE-2016-2519 affects ntpd (NTP) before 4.2.8p7 and 4.3.x before 4.3.92. A remote attacker can trigger a denial of service by sending a large request data value that causes ctl_getitem to return NULL, leading to ntpd abort. The issue is a result of not always checking the return value of ctl_geti...

CVE-2015-7976

CVE-2015-7976 affects the ntpq saveconfig command in the NTP reference implementation (ntpd/ntpq) across multiple 4.x branches (e.g., 4.1.2, 4.2.x prior to 4.2.8p6, and 4.3.x). The underlying flaw is that saveconfig does not properly filter special characters in filenames, enabling an attacker to...

CVE-2015-8158

The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service infinite loop via crafted packets with incorrect values...

CVE-2015-7978

NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service stack exhaustion via an ntpdc relist command, which triggers recursive traversal of the restriction list...

CVE-2015-7973

CVE-2015-7973 affects the NTP reference implementation (ntpd) prior to 4.2.8p6 and 4.3.x prior to 4.3.90. When configured in broadcast mode, authenticated broadcast packets can be recorded and replayed by an on‑path or MITM attacker, enabling a replay attack and unauthorized time updates. Public ...

CVE-2015-8138

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero...

CVE-2015-7977

CVE-2015-7977 : ntpd/nptdsp (NTP) vulnerability where processing of the ntpdc reslist command could cause a NULL pointer dereference and crash ntpd. This is triggered by large restriction lists. Affects ntpd/ntpdc in NTP 4.2.x leading up to 4.2.8p6 and 4.3.x prior to 4.3.90. Remediation: upgrade ...

CVE-2015-8138

CVE-2015-8138 relates to ntpd, where versions prior to 4.2.8p6 and 4.3.x prior to 4.3.90 allow a remote attacker to bypass origin timestamp validation by sending a packet with origin timestamp set to zero. Connected advisories confirm this is a real issue in ntpd and note it can enable spoofing o...

CVE-2015-8158

CVE-2015-8158 affects the ntpq utility in NTP. The getresponse() function can be triggered to enter an infinite loop by receiving crafted packets with incorrect values, causing a denial of service. This affects NTP versions prior to 4.2.8p9 and 4.3.x prior to 4.3.90. Upstream remediation is to up...

CVE-2015-8139

ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors...

CVE-2015-8138

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero...

CVE-2015-8140

CVE-2015-8140 : The ntpq protocol in NTP before 4.2.8p7 allows remote replay of authenticated commands by sniffing the network. The connected documents confirm this vulnerability within the NTP daemon and reference related advisories (e.g., F5 and Cisco) that group CVE-2015-8140 with other NTP is...

CVE-2015-7979

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service client-server association tear down by sending broadcast packets with invalid authentication to a broadcast client...

CVE-2015-7978

CVE-2015-7978 affects NTPd (ntp) in versions before 4.2.8p6 and 4.3.0 before 4.3.90. A remote attacker can trigger a denial of service (stack exhaustion) by sending an ntpdc relist command, which causes recursive traversal of the restriction list. This is corroborated by multiple connected source...

CVE-2015-7975

CVE-2015-7975 affects the NTP reference implementation (ntpd); the nextvar() function fails to validate input length in NTP 4.2.8p5, 4.2.8p6 and 4.3.x up to 4.3.89, enabling denial of service (application crash) via crafted queries. Impact mentioned across multiple advisories (including Cisco, Fr...

CVE-2015-7979

CVE-2015-7979 affects NTP ntpd in broadcast mode. The vulnerability allows a remote attacker to tear down the association of a broadcast client by sending broadcast packets with bad authentication, leading to desynchronization or DoS of affected clients. Confirmed details show impact in NTP versi...

CVE-2016-2517

CVE-2016-2517 refers to ntpd remote configuration vulnerabilities where, if ntpd is configured to allow remote configuration, an attacker who knows the controlkey or requestkey (when mode7 is enabled) can send crafted packets to ntpd and alter the values of trustedkey, controlkey, or requestkey, ...

CVE-2015-7976

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename...