ID:9621 - Exploit for Resource management error in ntp - CVE-2009-3563

 
Main Vulnerability Database Exploits ID:9621 - Exploit for Resource management error in ntp - CVE-2009-3563

ID:9621 - Exploit for Resource management error in ntp - CVE-2009-3563

Published: March 22, 2024


Vulnerability identifier: #VU87727
Vulnerability risk: Medium
CVE-ID: CVE-2009-3563
CWE-ID: CWE-399
Exploitation vector: Remote access
Vulnerable software:
ntp

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources in ntp_request.c. A remote attacker can perform a denial of service (DoS) attack using the MODE_PRIVATE to send a spoofed request or response packets that trigger a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.


Remediation

Install updates from vendor's website.