GCVE - cpe:2.3:a:ntp:ntp:4.1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ntp:ntp:4.1.2:*:*:*:*:*:*:*

part: a version: 4.1.2 update: *

Vendor	Ntp (`77708853-d84a-5559-8c08-a44d8f954172`)
Product	Ntp (`f62975db-b549-56ac-9df1-6f3f42fc2e08`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/ntp-project/ntp`	purl2cpe	2026-06-01 10:12:01.387926

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-7976`	vulnerable	2026-06-08 05:07:02.578416	Details available The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename. Published: 2017-01-30T21:00:00.000Z Updated: 2024-08-06T08:06:31.303Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-ntpd http://www.ubuntu.com/usn/USN-3096-1 http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.html http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html http://www.securitytracker.com/id/1034782	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3563`	vulnerable	2026-06-08 04:51:42.672990	Details available ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons. Published: 2009-12-09T00:00:00.000Z Updated: 2024-08-07T06:31:10.550Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/568372 http://secunia.com/advisories/38832 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11225 http://support.avaya.com/css/P8/documents/100071808	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0159`	vulnerable	2026-06-08 04:51:07.878263	Details available Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response. Published: 2009-04-14T15:00:00.000Z Updated: 2024-08-07T04:24:18.219Z Open on db.gcve.eu Reference links https://usn.ubuntu.com/777-1/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9634 http://secunia.com/advisories/35137 http://secunia.com/advisories/34608 http://secunia.com/advisories/35166	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.