Skip to content
Noroxi

NTP records

99 published records for vendor ntp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
3 · 3%
Pre-auth RCE
5
With a fix record
94.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

99 records
  • CVE-2015-7871
    64This week

    Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.

    CriticalCVSS 9.8WeaponizedEPSS 81%

    ntp · ntpAug 7, 2017

  • CVE-2014-9295
    54Plan

    Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, rel

    HighCVSS 7.5Proof of conceptEPSS 79%

    ntp · ntpDec 19, 2014

  • CVE-2013-5211
    49Plan

    The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplificat

    MediumCVSS 5.0WeaponizedEPSS 97%

    ntp · ntpJan 2, 2014

  • CVE-2018-12327
    47Plan

    Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher pri

    CriticalCVSS 9.8Proof of conceptEPSS 28%

    ntp · ntpJun 20, 2018

  • CVE-2016-7434
    46Plan

    The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.

    HighCVSS 7.5Proof of conceptEPSS 53%

    ntp · ntpJan 13, 2017

  • CVE-2016-4957
    43Plan

    ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet.

    HighCVSS 7.5No exploitEPSS 44%

    ntp · ntpJul 4, 2016

  • CVE-2015-7705
    43Plan

    The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large n

    CriticalCVSS 9.8No exploitEPSS 12%

    ntp · ntpAug 7, 2017

  • CVE-2015-7853
    43Plan

    The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitra

    CriticalCVSS 9.8No exploitEPSS 11%

    ntp · ntpAug 7, 2017

  • CVE-2018-7183
    42Plan

    Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by lever

    CriticalCVSS 9.8No exploitEPSS 10%

    ntp · ntpMar 8, 2018

  • CVE-2016-9312
    40Plan

    ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of service via a large UDP packet.

    HighCVSS 7.5No exploitEPSS 31%

    ntp · ntpJan 13, 2017

  • CVE-2015-7849
    40Plan

    Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly exec

    HighCVSS 8.8No exploitEPSS 16%

    ntp · ntpAug 7, 2017

  • CVE-2018-7182
    39Monitor

    The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via

    HighCVSS 7.5Proof of conceptEPSS 28%

    ntp · ntpMar 6, 2018

  • CVE-2015-7854
    39Monitor

    Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated us

    HighCVSS 8.8No exploitEPSS 14%

    ntp · ntpAug 7, 2017

  • CVE-2017-6458
    37Monitor

    Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have

    HighCVSS 8.8No exploitEPSS 6%

    ntp · ntpMar 27, 2017

  • CVE-2017-6460
    36Monitor

    Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspec

    HighCVSS 8.8No exploitEPSS 2%

    ntp · ntpMar 27, 2017

  • CVE-2009-3563
    35Monitor

    ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption)

    MediumCVSS 6.4WeaponizedEPSS 32%

    ntp · ntpDec 9, 2009

  • CVE-2015-7855
    35Monitor

    The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service

    MediumCVSS 6.5Proof of conceptEPSS 31%

    ntp · ntpAug 7, 2017

  • CVE-2016-4953
    35Monitor

    ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoo

    HighCVSS 7.5No exploitEPSS 17%

    ntp · ntpJul 4, 2016

  • CVE-2016-4954
    34Monitor

    The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-vari

    HighCVSS 7.5No exploitEPSS 13%

    ntp · ntpJul 4, 2016

  • CVE-2014-9294
    34Monitor

    util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attackers to defeat cryptogra

    HighCVSS 7.5No exploitEPSS 12%

    ntp · ntpDec 19, 2014

  • CVE-2014-9293
    34Monitor

    The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easi

    HighCVSS 7.5No exploitEPSS 12%

    ntp · ntpDec 19, 2014

  • CVE-2016-7426
    34Monitor

    NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allo

    HighCVSS 7.5No exploitEPSS 12%

    ntp · ntpJan 13, 2017

  • CVE-2015-7979
    34Monitor

    NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sen

    HighCVSS 7.5No exploitEPSS 11%

    ntp · ntpJan 30, 2017

  • CVE-2009-1252
    33Monitor

    Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSS

    MediumCVSS 6.8No exploitEPSS 21%

    ntp · ntpMay 19, 2009

  • CVE-2015-7704
    33Monitor

    The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of craft

    HighCVSS 7.5No exploitEPSS 10%

    ntp · ntpAug 7, 2017