Known vulnerabilities in ntp 4.2.8p4-RC1

Vendor: ntp.org
Software: ntp
Version: 4.2.8p4-RC1
Software CPE: cpe:2.3:a:ntp_org:ntp:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ntp version 4.2.8p4-RC1 ntp 4.2.8p4-RC1 is affected by 9 vulnerabilities: 8 medium, 1 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76002 - Out-of-bounds write
CVE-2023-26555
CWE-787 Low
No
No
- 10.05.2023 SB2023051059
SB2023060302
SB2023062234
and 13 more
#VU76001 - Out-of-bounds write
CVE-2023-26554
CWE-787 Medium
No
No
- 10.05.2023 SB2023051059
SB2023051060
SB2023051125
and 11 more
#VU76000 - Out-of-bounds write
CVE-2023-26553
CWE-787 Medium
No
No
- 10.05.2023 SB2023051059
SB2023051060
SB2023051125
and 11 more
#VU75999 - Out-of-bounds write
CVE-2023-26552
CWE-787 Medium
No
No
- 10.05.2023 SB2023051059
SB2023051060
SB2023051125
and 12 more
#VU75998 - Out-of-bounds write
CVE-2023-26551
CWE-787 Medium
No
No
- 10.05.2023 SB2023051059
SB2023051060
SB2023051125
and 11 more
#VU54028 - Improper input validation
CVE-2016-4956
CWE-20 Medium
No
No
4.2.8p8 10.06.2021 SB2016070512
SB2021061008
#VU54026 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2016-4955
CWE-362 Medium
No
No
4.2.8p8 10.06.2021 SB2016070511
SB2021061008
#VU54025 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2016-4954
CWE-362 Medium
No
No
4.2.8p8 10.06.2021 SB2016070510
SB2021061008
#VU54024 - Improper Authentication
CVE-2016-4953
CWE-287 Medium
No
No
4.2.8p8 10.06.2021 SB2016070509
SB2021061008