Known vulnerabilities in ntp

Vendor: ntp.org
Software: ntp
Software CPE: cpe:2.3:a:ntp_org:ntp:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 35
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ntp ntp is affected by 35 known vulnerabilities: 4 high, 19 medium, 12 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87727 - Resource Management Errors
CVE-2009-3563
CWE-399 Medium
Available
No
4.2.4p8 22.03.2024 SB2009120906
SB2024032228
SB2010010301
and 2 more
#VU76002 - Out-of-bounds write
CVE-2023-26555
CWE-787 Low
No
No
- 10.05.2023 SB2023051059
SB2023060302
SB2023062234
and 13 more
#VU76001 - Out-of-bounds write
CVE-2023-26554
CWE-787 Medium
No
No
- 10.05.2023 SB2023051059
SB2023051060
SB2023051125
and 11 more
#VU76000 - Out-of-bounds write
CVE-2023-26553
CWE-787 Medium
No
No
- 10.05.2023 SB2023051059
SB2023051060
SB2023051125
and 11 more
#VU75999 - Out-of-bounds write
CVE-2023-26552
CWE-787 Medium
No
No
- 10.05.2023 SB2023051059
SB2023051060
SB2023051125
and 12 more
#VU75998 - Out-of-bounds write
CVE-2023-26551
CWE-787 Medium
No
No
- 10.05.2023 SB2023051059
SB2023051060
SB2023051125
and 11 more
#VU54031 - Out-of-bounds read
CVE-2016-2518
CWE-125 Medium
No
No
4.2.8p9, 4.3.92 10.06.2021 SB2017013003
SB2021061008
#VU54030 - Exposure of sensitive information to an unauthorized actor
CVE-2016-1550
CWE-200 Medium
No
No
4.2.8p5 10.06.2021 SB2017010606
SB2021061008
#VU54029 - Improper input validation
CVE-2016-1547
CWE-20 Medium
No
No
4.2.8p5 10.06.2021 SB2017010605
SB2021061008
#VU54028 - Improper input validation
CVE-2016-4956
CWE-20 Medium
No
No
4.2.8p8 10.06.2021 SB2016070512
SB2021061008
#VU54027 - Data Handling
CVE-2016-1548
CWE-19 Medium
No
No
4.2.6p2-RC5 10.06.2021 SB2017010604
SB2021061008
#VU54026 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2016-4955
CWE-362 Medium
No
No
4.2.8p8 10.06.2021 SB2016070511
SB2021061008
#VU54025 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2016-4954
CWE-362 Medium
No
No
4.2.8p8 10.06.2021 SB2016070510
SB2021061008
#VU54024 - Improper Authentication
CVE-2016-4953
CWE-287 Medium
No
No
4.2.8p8 10.06.2021 SB2016070509
SB2021061008
#VU54023 - Memory corruption
CVE-2015-7853
CWE-119 High
No
No
4.2.8p4, 4.3.77 10.06.2021 SB20170807112
SB2021061008
#VU54022 - Improper input validation
CVE-2015-8138
CWE-20 Medium
No
No
4.2.8p6, 4.3.90 10.06.2021 SB2017013002
SB2021061008
#VU39358 - Stack-based buffer overflow
CVE-2017-6452
CWE-121 Medium
No
No
- 27.03.2017 SB2017032710
SB2017042202
SB2023050302
#VU39822 - Resource exhaustion
CVE-2016-7427
CWE-400 Low
No
No
- 13.01.2017 SB2017011319
SB2016112601
SB2018042473
#VU39823 - Resource exhaustion
CVE-2016-7428
CWE-400 Low
No
No
- 13.01.2017 SB2017011319
SB2016112601
SB2018042473
#VU39824 - Improper input validation
CVE-2016-7431
CWE-20 Medium
No
No
- 13.01.2017 SB2017011319
SB2016112601
SB2021061008


Showing elements 1 - 20 out of 35