CVE-2016-7428

🗓️ 13 Jan 2017 00:00:00Reported by ubuntu.comType

ntpd in NTP before 4.2.8p9 allows remote denial of service via the poll interval in a broadcast packet. Also affects ntp-4.3.90 up to 4.3.94 with CVE-2015-7973 patch

Reporter	Title	Published	Views	Family All 81
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in ntp affect IBM Flex System Manager (FSM)	18 Jun 201801:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in NTP affect IBM Flex System Chassis Management Module (CMM)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Network Time Protocol (NTP) affect IBM Virtualization Engine TS7700 (CVE-2016-7427, CVE-2016-7428, CVE-2016-9310, CVE-2016-9311)	5 Jan 202415:00	–	ibm
FreeBSD	ntp -- multiple vulnerabilities	21 Nov 201600:00	–	freebsd
FreeBSD	FreeBSD -- Multiple vulnerabilities of ntp	22 Dec 201600:00	–	freebsd
Tenable Nessus	AIX 6.1 TL 9 : ntp (IV91803) (deprecated)	14 Feb 201700:00	–	nessus
Tenable Nessus	AIX 7.1 TL 4 : ntp (IV91951) (deprecated)	14 Feb 201700:00	–	nessus
Tenable Nessus	AIX 7.2 TL 1 : ntp (IV92067) (deprecated)	21 Feb 201700:00	–	nessus
Tenable Nessus	AIX 7.2 TL 0 : ntp (IV92192) (deprecated)	14 Feb 201700:00	–	nessus
Tenable Nessus	AIX 7.1 TL 3 : ntp (IV92193) (deprecated)	21 Feb 201700:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	14.04	any	ntp	1:4.2.6.p5+dfsg-3ubuntu2.14.04.11	ntp_1:4.2.6.p5+dfsg-3ubuntu2.14.04.11_any.deb
Ubuntu	16.04	any	ntp	1:4.2.8p4+dfsg-3ubuntu5.5	ntp_1:4.2.8p4+dfsg-3ubuntu5.5_any.deb
Ubuntu	16.10	any	ntp	1:4.2.8p8+dfsg-1ubuntu2.1	ntp_1:4.2.8p8+dfsg-1ubuntu2.1_any.deb

Source	Link
talosintelligence	www.talosintelligence.com/reports/TALOS-2016-0130/
ubuntu	www.ubuntu.com/security/notices/USN-3349-1
ubuntu	www.ubuntu.com/security/notices/USN-3707-2
cve	www.cve.org/CVERecord

25 Aug 2025 22:10Current

6.7Medium risk

Vulners AI Score6.7

CVSS 23.3

CVSS 34.3

EPSS0.05301