Approved changes feed: RSS · Atom

cpe:2.3:a:ntp:ntp:4.2.4p5:*:*:*:*:*:*:*

part: a version: 4.2.4p5 update: *

VendorNtp (77708853-d84a-5559-8c08-a44d8f954172)
ProductNtp (f62975db-b549-56ac-9df1-6f3f42fc2e08)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ntp-project/ntp purl2cpe 2026-06-01 10:12:01.403564

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-1252 vulnerable 2026-06-08 04:51:14.090923 Details available
Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.
Published: 2009-05-19T19:00:00.000Z
Updated: 2024-08-07T05:04:49.300Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0159 vulnerable 2026-06-08 04:51:07.883272 Details available
Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
Published: 2009-04-14T15:00:00.000Z
Updated: 2024-08-07T04:24:18.219Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.