ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted packet.

CPENameOperatorVersion
ntple4.2.8

CPE	Name	Operator	Version
	ntp	le	4.2.8

References

nwtime.org/ntp428p9_release/

rhn.redhat.com/errata/RHSA-2017-0252.html

support.ntp.org/bin/view/Main/NtpBug3119

support.ntp.org/bin/view/Main/SecurityNotice

www.securityfocus.com/bid/94444

www.securitytracker.com/id/1037354

bto.bluecoat.com/security-advisory/sa139

h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us

security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03799en_us

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03885en_us

usn.ubuntu.com/3707-2/

www.kb.cert.org/vuls/id/633847

ubuntucve 1

f5 1

cvelist 1

cve 1

debiancve 1

nessus 41

veracode 1

redhatcve 1

nvd 1

myhack58 1

seebug 1

talos 1

ibm 16

openvas 19

aix 1

mageia 1

oraclelinux 3

fedora 3

centos 1

redhat 1

amazon 2

freebsd 2

freebsd_advisory 1

ubuntu 2

huawei 1

slackware 1

archlinux 1

cert 1

symantec 1

cisco 1

cloudfoundry 1

ubuntucve

CVE-2016-9311

2017-01-13 00:00:00

K55405388 : NTP vulnerability CVE-2016-9311

2016-12-30 00:00:00

cvelist

CVE-2016-9311

2017-01-13 16:00:00

cve

CVE-2016-9311

2017-01-13 16:59:00

debiancve

CVE-2016-9311

2017-01-13 16:59:00

nessus

F5 Networks BIG-IP : NTP vulnerability (K55405388)

2017-05-12 00:00:00

AIX 6.1 TL 9 : ntp (IV91803) (deprecated)

2017-02-14 00:00:00

AIX 7.1 TL 3 : ntp (IV92193) (deprecated)

2017-02-21 00:00:00

veracode

Denial Of Service (DoS)

2019-05-02 06:30:44

redhatcve

CVE-2016-9311

2016-11-24 14:17:32

nvd

CVE-2016-9311

2017-01-13 16:59:00

myhack58

Doing things the NTP----CVE-2016-7434 vulnerability analysis-vulnerability warning-the black bar safety net

2016-12-03 00:00:00

seebug

Network Time Protocol Trap Crash Denial of Service Vulnerability(CVE-2016-9311)

2017-10-11 00:00:00

talos

Network Time Protocol Trap Crash Denial of Service Vulnerability

2016-11-21 00:00:00

ibm

Security Bulletin: Vulnerabilities in ntp affect PowerKVM

2018-06-18 01:35:10

Security Bulletin: Multiple vulnerabilities in Network Time Protocol (NTP) affect IBM Virtualization Engine TS7700 (CVE-2016-7427, CVE-2016-7428, CVE-2016-9310, CVE-2016-9311)

2024-01-05 15:00:07

Security Bulletin: Multiple Ntp vulnerability affects IBM Identity Security Governance

2018-06-16 21:59:07

openvas

Mageia: Security Advisory (MGASA-2016-0414)

2022-01-28 00:00:00

Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2017-1023)

2020-01-23 00:00:00

CentOS Update for ntp CESA-2017:0252 centos7

2017-02-07 00:00:00

aix

There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.

2017-02-13 15:32:47

mageia

Updated ntp packages fix security vulnerabilities

2016-12-08 10:33:24

oraclelinux

ntp security update

2017-02-06 00:00:00

ntp security, bug fix, and enhancement update

2018-04-16 00:00:00

ntp security update

2017-10-26 00:00:00

fedora

[SECURITY] Fedora 25 Update: ntp-4.2.6p5-43.fc25

2016-12-08 03:53:53

[SECURITY] Fedora 23 Update: ntp-4.2.6p5-43.fc23

2016-12-08 03:20:50

[SECURITY] Fedora 24 Update: ntp-4.2.6p5-43.fc24

2016-12-07 20:21:32

centos

ntp, ntpdate, sntp security update

2017-02-06 11:25:17

redhat

(RHSA-2017:0252) Moderate: ntp security update

2017-02-06 03:59:03

amazon

Medium: ntp

2017-01-04 17:00:00

Medium: ntp

2018-05-10 17:11:00

freebsd

FreeBSD -- Multiple vulnerabilities of ntp

2016-12-22 00:00:00

ntp -- multiple vulnerabilities

2016-11-21 00:00:00

freebsd_advisory

FreeBSD-SA-16:39.ntp

2016-12-22 00:00:00

ubuntu

NTP vulnerabilities

2019-01-23 00:00:00

NTP vulnerabilities

2017-07-05 00:00:00

huawei

Security Advisory - Multiple NTPd Vulnerabilities in Huawei Products

2017-11-29 00:00:00

slackware

[slackware-security] ntp

2016-11-21 19:25:10

archlinux

[ASA-201611-28] ntp: multiple issues

2016-11-26 00:00:00

cert

NTP.org ntpd contains multiple denial of service vulnerabilities

2016-11-21 00:00:00

symantec

SA139 : November 2016 NTP Security Vulnerabilities

2017-01-12 08:00:00

cisco

Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: November 2016

2016-11-23 16:00:00

cloudfoundry

USN-3349-1: NTP vulnerabilities | Cloud Foundry

2017-08-04 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

6.8 Medium

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.4%

JSON

Related for PRION:CVE-2016-9311