Skip to content
OpenAdvisories
Unscored DSA-3108-1 4 CVEs

ntp - security update

Published Dec 20, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 ntp 1:4.2.6.p5+dfsg-2+deb7u1

Vulnerabilities 4

  • Unscored —
    CVE-2014-9293 EPSS 13%

    The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key…

  • Unscored —
    CVE-2014-9294 EPSS 13%

    util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attacker…

  • Unscored —
    CVE-2014-9295 Public exploit EPSS 79%

    Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2014-9296 EPSS 16%

    The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authenti…