3546 matches found
Code injection
The control mode mode 6 functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet...
CVE-2016-7431
NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression...
CVE-2016-7427
The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via a crafted broadcast mode packet...
Design/Logic Flaw
NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression...
CVE-2016-7429
NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service prevent communication with a source by sending a response for a source to an interface the source does not use...
CVE-2016-7428
ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via the poll interval in a broadcast packet...
CVE-2016-7433
NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."...
CVE-2016-7434
The readmrulist function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service crash via a crafted mrulist query...
CVE-2016-7429
CVE-2016-7429 affects ntpd where, if a server response arrives on a socket tied to a different interface than the request, ntpd may update the peer to use that interface. An attacker with spoofed source addresses can cause ntpd to fail to synchronize with the intended source, effectively enabling...
CVE-2016-9312
ntpd in NTP before 4.2.8p9, when running on Windows, is vulnerable to a remote DoS via a large UDP packet. Affected: ntpd on Windows; vulnerability arises from handling oversized UDP packets, allowing unauthenticated network-based DoS. Remediation per sources: upgrade to 4.2.8p9 or later from the...
CVE-2016-7433
NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."...
CVE-2016-7428
ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via the poll interval in a broadcast packet...
CVE-2016-7431
CVE-2016-7431 is a documented zero-origin-timestamp bypass in ntpd. A regression after fix for CVE-2015-8138 allowed some zero-origin timestamps to bypass origin timestamp validation. Affected in ntpd upstream releases prior to 4.2.8p9; Cloud Foundry and Arch Linux advisories describe persistent ...
CVE-2016-9310
The control mode mode 6 functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet...
CVE-2016-7433
CVE-2016-7433 affects ntpd (ntp) prior to 4.2.8p9. Root cause: initial sync calculations regression where the root distance did not include peer dispersion. This can cause incorrect timing calculations, with documented potential for denial of service or disruption. Remediation: upgrade ntp to 4.2...
CVE-2016-7426
The CVE-2016-7426 entry concerns ntpd’s rate-limiting behavior: when rate limiting for all associations is enabled, responses from configured sources are also rate-limited, enabling a remote attacker to cause a denial of service by sending spoofed-source responses that prevent ntpd from accepting...
CVE-2016-7434
The readmrulist function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service crash via a crafted mrulist query...
CVE-2016-7427
Removed by vendor...