Approved changes feed: RSS · Atom
cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hpe (8bc0c2a2-a9de-5f61-aa1f-0aa716beac6b) |
|---|---|
| Product | Hpux Ntp (c19f8e5d-ca08-54ed-a355-c366a2ffd905) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-8936 |
vulnerable | 2026-06-08 05:14:24.693764 |
Details available
NTP through 4.2.8p12 has a NULL Pointer Dereference.
Published: 2019-05-15T15:37:31.000Z
Updated: 2024-08-04T21:31:37.562Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7185 |
vulnerable | 2026-06-08 05:11:55.137995 |
Details available
The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.
Published: 2018-03-06T20:00:00.000Z
Updated: 2024-08-05T06:24:11.467Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7170 |
vulnerable | 2026-06-08 05:11:55.099420 |
Details available
ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.
Published: 2018-03-06T20:00:00.000Z
Updated: 2024-08-05T06:24:10.327Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6458 |
vulnerable | 2026-06-08 05:09:51.360603 |
Details available
Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.
Published: 2017-03-27T17:00:00.000Z
Updated: 2024-08-05T15:33:19.812Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9042 |
vulnerable | 2026-06-08 05:08:22.456486 |
Details available
LOW (3.7)
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
Published: 2018-06-04T20:00:00.000Z
Updated: 2024-09-17T03:53:51.612Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7434 |
vulnerable | 2026-06-08 05:08:12.641659 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7426 |
vulnerable | 2026-06-08 05:08:12.398115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.