Skip to content
OpenAdvisories
Unscored USN-2497-1 2 CVEs

ntp vulnerabilities

Published Feb 9, 2015 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Stephen Roettger, Sebastian Krahmer, and Harlan Stenn discovered that NTP
incorrectly handled the length value in extension fields. A remote attacker
could use this issue to possibly obtain leaked information, or cause the
NTP daemon to crash, resulting in a denial of service. (CVE-2014-9297)

Stephen Roettger discovered that NTP incorrectly handled ACLs based on
certain IPv6 addresses. (CVE-2014-9298)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS ntp 1:4.2.6.p5+dfsg-3ubuntu2.14.04.2

Vulnerabilities 2

  • Unscored —
    CVE-2014-9297 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9750, CVE-2014-9751. Reason: this ID was intended for one issue,…

    ntp Ubuntu
  • Unscored —
    CVE-2014-9298 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9750, CVE-2014-9751. Reason: this ID was intended for one issue,…

    ntp Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-9297
  • report
    https://ubuntu.com/security/CVE-2014-9298