Skip to content
OpenAdvisories
Critical ICSA-14-353-01C 6 CVEs

Network Time Protocol Vulnerabilities

Published Sep 21, 2014 · Updated Jun 6, 2025 · Revision 2

Vendor: Arbiter Systems; Innomoninate; Meinberg; Siemens; Wind River System Product: Arbiter Systems Clock products using the network card Product: Innomoninate mGuard Firmware Product: Meinberg LANTIME Firmware Product: Meinberg NTP V4.x Product: Siemens ROX 1 Product: Siemens ROX 2 Product: Wind River System VxWorks Product: Wind River System WR Linux

Vulnerabilities 6

  • Unscored —
    CVE-2014-9293 EPSS 13%

    The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2014-9294 EPSS 13%

    util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attacker…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2014-9295 Public exploit EPSS 79%

    Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2014-9296 EPSS 16%

    The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authenti…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2014-9297 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9750, CVE-2014-9751. Reason: this ID was intended for one issue,…

    ntp Ubuntu
  • Unscored —
    CVE-2014-9298 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9750, CVE-2014-9751. Reason: this ID was intended for one issue,…

    ntp Ubuntu

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References