3525 matches found
CVE-2016-7431
NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression...
CVE-2016-9310
The control mode mode 6 functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet...
CVE-2016-7429
NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service prevent communication with a source by sending a response for a source to an interface the source does not use...
CVE-2016-7434
The readmrulist function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service crash via a crafted mrulist query...
CVE-2016-7433
NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."...
CVE-2016-7428
ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via the poll interval in a broadcast packet...
CVE-2016-7427
The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via a crafted broadcast mode packet...
CVE-2016-7433
NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."...
CVE-2016-9310
The control mode mode 6 functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet...
CVE-2016-7426
The CVE-2016-7426 entry concerns ntpd’s rate-limiting behavior: when rate limiting for all associations is enabled, responses from configured sources are also rate-limited, enabling a remote attacker to cause a denial of service by sending spoofed-source responses that prevent ntpd from accepting...
CVE-2016-7433
CVE-2016-7433 affects ntpd (ntp) prior to 4.2.8p9. Root cause: initial sync calculations regression where the root distance did not include peer dispersion. This can cause incorrect timing calculations, with documented potential for denial of service or disruption. Remediation: upgrade ntp to 4.2...
CVE-2016-9312
ntpd in NTP before 4.2.8p9, when running on Windows, is vulnerable to a remote DoS via a large UDP packet. Affected: ntpd on Windows; vulnerability arises from handling oversized UDP packets, allowing unauthenticated network-based DoS. Remediation per sources: upgrade to 4.2.8p9 or later from the...
CVE-2016-7434
The readmrulist function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service crash via a crafted mrulist query...
CVE-2016-7429
CVE-2016-7429 affects ntpd where, if a server response arrives on a socket tied to a different interface than the request, ntpd may update the peer to use that interface. An attacker with spoofed source addresses can cause ntpd to fail to synchronize with the intended source, effectively enabling...
CVE-2016-7431
CVE-2016-7431 is a documented zero-origin-timestamp bypass in ntpd. A regression after fix for CVE-2015-8138 allowed some zero-origin timestamps to bypass origin timestamp validation. Affected in ntpd upstream releases prior to 4.2.8p9; Cloud Foundry and Arch Linux advisories describe persistent ...
CVE-2016-7427
The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via a crafted broadcast mode packet...
CVE-2016-7429
NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service prevent communication with a source by sending a response for a source to an interface the source does not use...
CVE-2016-9311
ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted packet...