Ntp@4.3.91 Security Vulnerabilities and Issues — Ntp@4.3.91 CVE List

Lucene search

NtpNtp4.3.91

11 matches found

CVE•added 2017/01/30 9:59 p.m.•188 views

CVE-2016-2516

NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service (ntpd abort) by using the same IP address multiple times in an unconfig directive.

7.1CVSS6AI score0.17861EPSS

CVE•added 2017/01/30 9:59 p.m.•127 views

CVE-2016-2517

NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, controlkey, or requestkey. NOTE: t...

5.3CVSS6AI score0.17861EPSS

CVE•added 2017/03/27 5:59 p.m.•121 views

CVE-2017-6462

Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.

7.8CVSS7AI score0.00118EPSS

CVE•added 2017/01/30 9:59 p.m.•119 views

CVE-2016-2519

ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value.

5.9CVSS6.5AI score0.1177EPSS

CVE•added 2017/03/27 5:59 p.m.•112 views

CVE-2017-6463

NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.

6.5CVSS6.5AI score0.02391EPSS

CVE•added 2017/03/27 5:59 p.m.•111 views

CVE-2017-6464

NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.

6.5CVSS6.7AI score0.02518EPSS

CVE•added 2017/03/27 5:59 p.m.•82 views

CVE-2017-6451

The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.

7.8CVSS8.2AI score0.00158EPSS

CVE•added 2017/03/27 5:59 p.m.•80 views

CVE-2017-6460

Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.

8.8CVSS7.3AI score0.00856EPSS

CVE•added 2017/03/27 5:59 p.m.•78 views

CVE-2017-6455

NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPI_DLLS environment variable.

7CVSS7.4AI score0.0007EPSS

CVE•added 2017/03/27 5:59 p.m.•76 views

CVE-2017-6459

The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes.

5.5CVSS6.7AI score0.00066EPSS

CVE•added 2017/03/27 5:59 p.m.•65 views

CVE-2017-6452

Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line.

7.8CVSS8.4AI score0.00126EPSS