Max CVSS | 7.5 | Min CVSS | 3.3 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2018-7183 | 7.5 |
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.
|
20-07-2021 - 23:15 | 08-03-2018 - 20:29 | |
CVE-2018-7185 | 5.0 |
The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association
|
24-08-2020 - 17:37 | 06-03-2018 - 20:29 | |
CVE-2016-7426 | 4.3 |
NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses wit
|
18-06-2020 - 18:14 | 13-01-2017 - 16:59 | |
CVE-2017-6462 | 4.6 |
Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.
|
24-01-2019 - 11:29 | 27-03-2017 - 17:59 | |
CVE-2017-6463 | 4.0 |
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.
|
24-01-2019 - 11:29 | 27-03-2017 - 17:59 | |
CVE-2016-9310 | 6.4 |
The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.
|
24-01-2019 - 11:29 | 13-01-2017 - 16:59 | |
CVE-2016-7428 | 3.3 |
ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via the poll interval in a broadcast packet.
|
24-01-2019 - 11:29 | 13-01-2017 - 16:59 | |
CVE-2016-7427 | 3.3 |
The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via a crafted broadcast mode packet.
|
24-01-2019 - 11:29 | 13-01-2017 - 16:59 | |
CVE-2016-9311 | 7.1 |
ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted packet.
|
24-01-2019 - 11:29 | 13-01-2017 - 16:59 |