Skip to content
OpenAdvisories
Unscored DLA-559-1 11 CVEs

ntp - security update

Published Jul 25, 2016 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 ntp 1:4.2.6.p5+dfsg-2+deb7u7

Vulnerabilities 11

  • Unscored —

    NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating pa…

  • Unscored —

    ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer d…

  • Unscored —

    NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) vi…

  • Unscored —
    CVE-2015-7979 EPSS 12%

    NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server associat…

  • Unscored —

    NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a pack…

  • Unscored —

    The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to caus…

  • Unscored —

    An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec…

  • Unscored —

    An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timest…

  • Unscored —

    An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5f…

  • Unscored —

    NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2016-2518 EPSS 15%

    The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-…