Lucene search
K

46 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-1891

Malicious code in bioql PyPI...

7.5CVSS7.4AI score0.00216EPSS
Exploits0References4
NVD
NVD
added 2025/08/29 9:15 p.m.1 views

CVE-2025-58066

nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1 inclusive servers which allow non-NTS traffic are affected by a denial of service vulnerability, where an attacker can induce a message storm between two NTP...

5.3CVSS0.00105EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/29 12:0 a.m.1 views

ntpd-rs 安全漏洞

ntpd-rs is a Project Pendulum open source tool for synchronizing computer clocks with the NTP and NTS protocols. A security vulnerability exists in ntpd-rs versions 1.2.0 through 1.6.1, which stems from allowing non-NTS traffic and could lead to a denial of service attack...

5.3CVSS6.2AI score0.00105EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2018-7185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service disruption by continually sending a packet with a...

7.5CVSS6.7AI score0.0292EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2015-8140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network. CVE-2015-8140 Note that Nessus relies on the...

5.8CVSS6.4AI score0.29857EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/04/14 1:51 a.m.1 views

SUSE CVE-2023-26555

praecisparse in ntpd/refclockpalisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver...

5.5CVSS7.9AI score0.00942EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:13 a.m.1 views

SUSE CVE-2015-7704

The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages...

7.5CVSS8.7AI score0.21462EPSS
Exploits0References17
SUSE CVE
SUSE CVE
added 2023/02/15 5:12 a.m.1 views

SUSE CVE-2015-8140

The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network...

4.8CVSS7AI score0.29857EPSS
Exploits0References12
SUSE CVE
SUSE CVE
added 2023/02/15 5:12 a.m.1 views

SUSE CVE-2015-8158

The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service infinite loop via crafted packets with incorrect values...

5.9CVSS6.8AI score0.08124EPSS
Exploits0References11
Veracode
Veracode
added 2020/04/10 12:42 a.m.48 views

Denial Of Service (DoS)

The Network Time Protocol NTP is vulnerable to Denial Of Service DoS. Robin Park and Dmitri Vinokurov discovered a flaw in the way ntpd handled certain malformed NTP packets. ntpd logged information about all such packets and replied with an NTP packet that was treated as malformed when received ...

6.4CVSS2AI score0.81107EPSS
Exploits3References96Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/10/18 3:50 a.m.99 views

Security Bulletin: IBM Smart Analytics System 7600, 7700, 7710 and IBM PureData System for Operational Analytics is affected by multiple vulnerabilities in Network Time Protocol

Summary The IBM Smart Analytics System 7600, 7700, 7710 and IBM PureData System for Operational Analytics is affected by multiple vulnerabilities in Network Time Protocol. Vulnerability Details CVEID: CVE-2014-9293 DESCRIPTION: Network Time Protocol NTP Project NTP daemon ntpd could provide weake...

7.5CVSS0.7AI score0.57272EPSS
Exploits4Affected Software2
Prion
Prion
added 2019/01/16 5:29 a.m.11 views

Design/Logic Flaw

An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a malformed config request, related to configremotely in ntpconfig.c, yyparse in ntpparser.tab.c, and yyerror in ntpparser.y...

4CVSS6.2AI score0.18025EPSS
Exploits5References4Affected Software1
NVD
NVD
added 2018/03/06 8:29 p.m.20 views

CVE-2018-7185

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service disruption by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association...

7.5CVSS7.2AI score0.0292EPSS
Exploits0References12
OSV
OSV
added 2018/03/06 8:29 p.m.6 views

CVE-2018-7185

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service disruption by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association...

7.5CVSS8.2AI score
Exploits0References12
UbuntuCve
UbuntuCve
added 2018/03/06 12:0 a.m.34 views

CVE-2018-7185

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service disruption by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association...

7.5CVSS6.8AI score0.0292EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2018/02/28 7:49 p.m.29 views

CVE-2018-7185

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service disruption by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association...

7.5CVSS3.6AI score0.0292EPSS
Exploits0References2
OSV
OSV
added 2017/03/27 12:0 a.m.0 views

UBUNTU-CVE-2017-6460

Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response...

8.8CVSS7.6AI score0.02005EPSS
Exploits0References3
NVD
NVD
added 2017/01/30 9:59 p.m.22 views

CVE-2015-8140

The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network...

5.8CVSS6AI score0.29857EPSS
Exploits0References14
Prion
Prion
added 2017/01/30 9:59 p.m.21 views

Code injection

The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network...

5.8CVSS6.9AI score0.29857EPSS
Exploits0References14Affected Software1
OSV
OSV
added 2017/01/30 9:59 p.m.5 views

CVE-2015-8140

The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network...

4.8CVSS6AI score
Exploits0References15
Rows per page
Query Builder