CVE-2015-7979

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service client-server association tear down by sending broadcast packets with invalid authentication to a broadcast client...

CVE-2016-2516

NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service ntpd abort by using the same IP address multiple times in an unconfig directive...

CVE-2015-7978

NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service stack exhaustion via an ntpdc relist command, which triggers recursive traversal of the restriction list...

CVE-2015-7977

ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service NULL pointer dereference via a ntpdc reslist command...

CVE-2015-7973

CVE-2015-7973 affects the NTP reference implementation (ntpd) prior to 4.2.8p6 and 4.3.x prior to 4.3.90. When configured in broadcast mode, authenticated broadcast packets can be recorded and replayed by an on‑path or MITM attacker, enabling a replay attack and unauthorized time updates. Public ...

CVE-2015-7977

CVE-2015-7977 : ntpd/nptdsp (NTP) vulnerability where processing of the ntpdc reslist command could cause a NULL pointer dereference and crash ntpd. This is triggered by large restriction lists. Affects ntpd/ntpdc in NTP 4.2.x leading up to 4.2.8p6 and 4.3.x prior to 4.3.90. Remediation: upgrade ...

CVE-2015-7979

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service client-server association tear down by sending broadcast packets with invalid authentication to a broadcast client...

CVE-2015-7978

CVE-2015-7978 affects NTPd (ntp) in versions before 4.2.8p6 and 4.3.0 before 4.3.90. A remote attacker can trigger a denial of service (stack exhaustion) by sending an ntpdc relist command, which causes recursive traversal of the restriction list. This is corroborated by multiple connected source...

CVE-2015-7975

CVE-2015-7975 affects the NTP reference implementation (ntpd); the nextvar() function fails to validate input length in NTP 4.2.8p5, 4.2.8p6 and 4.3.x up to 4.3.89, enabling denial of service (application crash) via crafted queries. Impact mentioned across multiple advisories (including Cisco, Fr...

CVE-2015-8158

CVE-2015-8158 affects the ntpq utility in NTP. The getresponse() function can be triggered to enter an infinite loop by receiving crafted packets with incorrect values, causing a denial of service. This affects NTP versions prior to 4.2.8p9 and 4.3.x prior to 4.3.90. Upstream remediation is to up...

CVE-2015-8139

ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors...

CVE-2015-8140

CVE-2015-8140 : The ntpq protocol in NTP before 4.2.8p7 allows remote replay of authenticated commands by sniffing the network. The connected documents confirm this vulnerability within the NTP daemon and reference related advisories (e.g., F5 and Cisco) that group CVE-2015-8140 with other NTP is...

CVE-2015-8138

CVE-2015-8138 relates to ntpd, where versions prior to 4.2.8p6 and 4.3.x prior to 4.3.90 allow a remote attacker to bypass origin timestamp validation by sending a packet with origin timestamp set to zero. Connected advisories confirm this is a real issue in ntpd and note it can enable spoofing o...

CVE-2015-8138

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero...

CVE-2015-7979

CVE-2015-7979 affects NTP ntpd in broadcast mode. The vulnerability allows a remote attacker to tear down the association of a broadcast client by sending broadcast packets with bad authentication, leading to desynchronization or DoS of affected clients. Confirmed details show impact in NTP versi...

CVE-2015-8138

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero...

CVE-2016-2518

The MATCHASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value...

CVE-2015-7975

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service application crash...

CVE-2015-7976

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename...

CVE-2016-2516

CVE-2016-2516 affects ntp before 4.2.8p7 and 4.3.x before 4.3.92. When mode7 is enabled, ntpd can abort or crash due to duplicate IPs on unconfig directives, enabling remote denial of service. Publicly documented fixes exist: Debian security advisories note patches in ntp packages (e.g., Jessie u...