CVE-2016-9312

ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of service via a large UDP packet...

CVE-2016-9311

ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted packet...

CVE-2016-7427

The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via a crafted broadcast mode packet...

CVE-2016-7434

The CVE-2016-7434 entry affects the ntpd (Network Time Protocol daemon) before 4.2.8p9. A crafted mrulist query packet can trigger a crash, causing a remote denial of service. This is evidenced by the CVE description and corroborated in the Arch Linux security advisory, which lists the fix to 4.2...

CVE-2016-7426

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service prevent responses from the sources by sending responses with a spoofed source address...

CVE-2016-7428

CVE-2016-7428 affects ntpd (NTP) before 4.2.8p9, enabling a remote attacker in a local network to trigger a DoS by abusing the broadcast mode poll interval enforcement. The issue is triggered when handling specially crafted broadcast-mode packets, causing ntpd to reject legitimate broadcast packe...

CVE-2016-7429

NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service prevent communication with a source by sending a response for a source to an interface the source does not use...

CVE-2016-7428

ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via the poll interval in a broadcast packet...

CVE-2016-9310

The control mode mode 6 functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet...

CVE-2016-9311

CVE-2016-9311 : The ntpd trap service vulnerability allows remote attackers to trigger a denial of service by sending crafted packets, causing a NULL pointer dereference and crash when the trap service is enabled. Connected advisories indicate this affects ntp in multiple platforms and versions; ...

CVE-2016-9311

ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted packet...

CVE-2016-7427

The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via a crafted broadcast mode packet...

CVE-2016-7431

NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression...

CVE-2016-7427

CVE-2016-7427 concerns ntpd’s broadcast mode replay prevention. A remote attacker can cause a denial-of-service by injecting specially crafted broadcast-mode packets into a trusted broadcast domain, leading ntpd to reject legitimate broadcast packets. The entry notes this affects ntpd in NTP vers...

CVE-2016-9310

The CVE-2016-9310 issue concerns ntpd’s control mode (mode 6) handling. A remote attacker can send crafted control-mode packets to ntpd instances running versions before 4.2.8p9, enabling the attacker to set or unset traps. This can lead to information disclosure and application crashes, effectiv...

CVE-2016-7433

NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."...

CVE-2016-7426

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service prevent responses from the sources by sending responses with a spoofed source address...

CVE-2016-7431

NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression...

CVE-2016-7434

The readmrulist function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service crash via a crafted mrulist query...

CVE-2016-7431

NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression...