GCVE - cpe:2.3:a:ntp:ntp:*:p6:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ntp:ntp:*:p6:*:*:*:*:*:*

part: a version: * update: p6

Vendor	Ntp (`77708853-d84a-5559-8c08-a44d8f954172`)
Product	Ntp (`f62975db-b549-56ac-9df1-6f3f42fc2e08`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-2519`	vulnerable	2026-06-08 05:07:42.530604	Details available ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value. Published: 2017-01-30T21:00:00.000Z Updated: 2024-08-05T23:32:20.903Z Open on db.gcve.eu Reference links http://support.ntp.org/bin/view/Main/NtpBug3008 https://www.kb.cert.org/vuls/id/718152 http://www.securitytracker.com/id/1035705 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html https://security.netapp.com/advisory/ntap-20171004-0002/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2517`	vulnerable	2026-06-08 05:07:42.448865	Details available NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or requestkey and sending a crafted packet to ntpd, which changes the value of trustedkey, controlkey, or requestkey. NOTE: this vulnerability exists because of a CVE-2016-2516 regression. Published: 2017-01-30T21:00:00.000Z Updated: 2024-08-05T23:32:20.572Z Open on db.gcve.eu Reference links http://support.ntp.org/bin/view/Main/NtpBug3010 http://www.securityfocus.com/bid/88189 https://www.kb.cert.org/vuls/id/718152 http://www.securitytracker.com/id/1035705 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2516`	vulnerable	2026-06-08 05:07:42.397792	Details available NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service (ntpd abort) by using the same IP address multiple times in an unconfig directive. Published: 2017-01-30T21:00:00.000Z Updated: 2024-08-05T23:32:20.291Z Open on db.gcve.eu Reference links http://www.debian.org/security/2016/dsa-3629 http://www.securityfocus.com/bid/88180 https://www.kb.cert.org/vuls/id/718152 http://www.securitytracker.com/id/1035705 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8140`	vulnerable	2026-06-08 05:07:03.274495	Details available The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network. Published: 2017-01-30T21:00:00.000Z Updated: 2024-08-06T08:13:31.109Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html http://www.securitytracker.com/id/1034782 http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.html https://www.kb.cert.org/vuls/id/718152	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8139`	vulnerable	2026-06-08 05:07:03.273887	Details available ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then impersonate peers via unspecified vectors. Published: 2017-01-30T21:00:00.000Z Updated: 2024-08-06T08:13:31.058Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNWGCQLW2VY72NIUYMJOCAKJKTXHDUK2/ http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORAMN3Q7TVJ54MBYF75XCJOE3DP7LYHT/ http://www.securitytracker.com/id/1034782	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.