Approved changes feed: RSS · Atom

cpe:2.3:a:ntp:ntp:*:p5:*:*:*:*:*:*

part: a version: * update: p5

VendorNtp (77708853-d84a-5559-8c08-a44d8f954172)
ProductNtp (f62975db-b549-56ac-9df1-6f3f42fc2e08)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-8158 vulnerable 2026-06-08 05:07:03.289015 Details available
The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (infinite loop) via crafted packets with incorrect values.
Published: 2017-01-30T21:00:00.000Z
Updated: 2024-08-06T08:13:32.449Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8138 vulnerable 2026-06-08 05:07:03.262693 Details available
NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.
Published: 2017-01-30T21:00:00.000Z
Updated: 2024-08-06T08:13:31.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7979 vulnerable 2026-06-08 05:07:02.616075 Details available
NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.
Published: 2017-01-30T21:00:00.000Z
Updated: 2024-08-06T08:06:31.532Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7978 vulnerable 2026-06-08 05:07:02.613332 Details available
NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.
Published: 2017-01-30T21:00:00.000Z
Updated: 2024-08-06T08:06:31.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7976 vulnerable 2026-06-08 05:07:02.578465 Details available
The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.
Published: 2017-01-30T21:00:00.000Z
Updated: 2024-08-06T08:06:31.303Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7975 vulnerable 2026-06-08 05:07:02.531551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.