Known vulnerabilities in ntp

Vendor: ntp.org
Software: ntp
Software CPE: cpe:2.3:a:ntp_org:ntp:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 35
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ntp ntp is affected by 35 known vulnerabilities: 4 high, 19 medium, 12 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76002 - Out-of-bounds write
CVE-2023-26555
CWE-787 Low
No
No
- 10.05.2023 SB2023051059
SB2023060302
SB2023062234
and 13 more
#VU76001 - Out-of-bounds write
CVE-2023-26554
CWE-787 Medium
No
No
- 10.05.2023 SB2023051059
SB2023051060
SB2023051125
and 11 more
#VU76000 - Out-of-bounds write
CVE-2023-26553
CWE-787 Medium
No
No
- 10.05.2023 SB2023051059
SB2023051060
SB2023051125
and 11 more
#VU75999 - Out-of-bounds write
CVE-2023-26552
CWE-787 Medium
No
No
- 10.05.2023 SB2023051059
SB2023051060
SB2023051125
and 12 more
#VU75998 - Out-of-bounds write
CVE-2023-26551
CWE-787 Medium
No
No
- 10.05.2023 SB2023051059
SB2023051060
SB2023051125
and 11 more
#VU54031 - Out-of-bounds read
CVE-2016-2518
CWE-125 Medium
No
No
4.2.8p9, 4.3.92 10.06.2021 SB2017013003
SB2021061008
#VU54023 - Memory corruption
CVE-2015-7853
CWE-119 High
No
No
4.2.8p4, 4.3.77 10.06.2021 SB20170807112
SB2021061008
#VU29542 - Improper input validation
CVE-2018-8956
CWE-20 Low
No
No
4.2.8p14 07.07.2020 SB2020031931
SB2020070701
SB2020071906
and 1 more
#VU29293 - Missing release of memory after effective lifetime
CVE-2020-15025
CWE-401 Low
No
No
4.2.8p15, 4.3.101 25.06.2020 SB2020062515
SB2020062516
SB2020070701
and 6 more
#VU27395 - Authentication Bypass by Spoofing
CVE-2020-11868
CWE-290 Low
No
No
4.2.8p14 28.04.2020 SB2020042822
SB2020070701
SB2020071906
and 7 more
#VU26242 - Resource Management Errors
CWE-399 Low
No
No
4.2.8p14 19.03.2020 SB2020031931
SB2020031932
#VU26241 - Resource Management Errors
CVE-2020-13817
CWE-399 Low
No
No
4.2.8p14 19.03.2020 SB2020031931
SB2020031932
SB2020070701
and 12 more
#VU26240 - Out-of-bounds read
CWE-125 Low
No
No
4.2.8p14 19.03.2020 SB2020031931
SB2020031932
#VU34848 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-7851
CWE-22 Medium
No
No
4.3.77 28.01.2020 SB2020012834
#VU20339 - NULL Pointer Dereference
CVE-2019-8936
CWE-476 Low
No
No
4.2.8p13, 4.3.94 20.08.2019 SB2019082007
SB2019040513
SB2019040514
and 13 more
#VU36001 - Security Features
CVE-2019-11331
CWE-254 High
No
No
- 19.04.2019 SB2019041905
SB2022110236
#VU12771 - Stack-based buffer overflow
CVE-2017-6460
CWE-121 High
No
No
- 16.05.2018 SB2017032104
SB2017042202
SB2023050302
and 1 more
#VU39358 - Stack-based buffer overflow
CVE-2017-6452
CWE-121 Medium
No
No
- 27.03.2017 SB2017032710
SB2017042202
SB2023050302
#VU39359 - Improper Control of Generation of Code ('Code Injection')
CVE-2017-6455
CWE-94 Low
No
No
- 27.03.2017 SB2017032710
SB2017042202
SB2023050302
#VU39360 - Memory corruption
CVE-2017-6459
CWE-119 Low
No
No
- 27.03.2017 SB2017032710
SB2017042202
SB2023050302


Showing elements 1 - 20 out of 35