NTP Project NTP
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2016-1551 | 4.2.8p3 ; 4.2.8p4 | ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from request | LOW 3.7 | 2.2 % | ||
| CVE-2016-1550 | 4.2.8p3 ; 4.2.8p4 | An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f45 | MEDIUM 5.3 | 3.6 % | ||
| CVE-2016-1549 | 4.2.8p3 ; 4.2.8p4 | A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in N | MEDIUM 6.5 | 3.1 % | ||
| CVE-2016-1548 | 4.2.8p4 | An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that | HIGH 7.2 | 3.8 % | ||
| CVE-2016-1547 | 4.2.8p3 ; 4.2.8p4 | An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef | MEDIUM 5.3 | 5.1 % |