Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow
remote attackers to execute arbitrary code via a crafted packet, related to
(1) the crypto_recv function when the Autokey Authentication feature is
used, (2) the ctl_putdata function, and (3) the configure function.

Bugs

<http://bugs.ntp.org/show_bug.cgi?id=2667>
<http://bugs.ntp.org/show_bug.cgi?id=2668>
<http://bugs.ntp.org/show_bug.cgi?id=2669>
<https://bugs.launchpad.net/bugs/1404648>

Notes

Author	Note
mdeslaur	configure() isn’t in lucid

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchntp< 1:4.2.4p8+dfsg-1ubuntu2.2UNKNOWN
ubuntu12.04noarchntp< 1:4.2.6.p3+dfsg-1ubuntu3.2UNKNOWN
ubuntu14.04noarchntp< 1:4.2.6.p5+dfsg-3ubuntu2.14.04.1UNKNOWN
ubuntu14.10noarchntp< 1:4.2.6.p5+dfsg-3ubuntu2.14.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	ntp	< 1:4.2.4p8+dfsg-1ubuntu2.2	UNKNOWN
ubuntu	12.04	noarch	ntp	< 1:4.2.6.p3+dfsg-1ubuntu3.2	UNKNOWN
ubuntu	14.04	noarch	ntp	< 1:4.2.6.p5+dfsg-3ubuntu2.14.04.1	UNKNOWN
ubuntu	14.10	noarch	ntp	< 1:4.2.6.p5+dfsg-3ubuntu2.14.10.1	UNKNOWN

References

cwe.mitre.org/data/definitions/121.html

support.ntp.org/bin/view/Main/SecurityNotice#Buffer_overflow_in_crypto_recv

www.kb.cert.org/vuls/id/852879

launchpad.net/bugs/cve/CVE-2014-9295

nvd.nist.gov/vuln/detail/CVE-2014-9295

security-tracker.debian.org/tracker/CVE-2014-9295

ubuntu.com/security/notices/USN-2449-1

www.cve.org/CVERecord?id=CVE-2014-9295

suse 6

huawei 1

securityvulns 6

myhack58 1

openvas 27

f5 2

debiancve 1

googleprojectzero 1

checkpoint_advisories 1

thn 1

prion 1

nessus 45

cvelist 1

nvd 1

ibm 7

cve 1

ics 3

oraclelinux 2

centos 2

redhat 3

aix 1

freebsd 1

veracode 3

archlinux 1

osv 2

freebsd_advisory 1

mageia 1

fedora 7

ubuntu 1

gentoo 1

slackware 1

arista 1

amazon 1

checkpoint_security 1

debian 2

cisco 1

cert 1

oracle 1

suse

Security update for ntp (critical)

2014-12-24 19:04:44

Security update for xntp (critical)

2014-12-24 08:05:38

Security update for ntp (critical)

2014-12-22 21:04:50

huawei

Security Advisory - NTPd Security Vulnerability in Multiple Huawei Products

2015-03-16 00:00:00

securityvulns

APPLE-SA-2014-12-22-1 OS X NTP Security Update

2014-12-23 00:00:00

FreeBSD Security Advisory FreeBSD-SA-14:31.ntp

2014-12-25 00:00:00

Cisco Security Advisory: Multiple Vulnerabilities in ntpd Affecting Cisco Products

2014-12-25 00:00:00

myhack58

From the source perspective on the ntpd stack buffer overflow vulnerability(CVE-2 0 1 4-9 2 9 5)analysis-vulnerability warning-the black bar safety net

2014-12-25 00:00:00

openvas

SUSE: Security Advisory (SUSE-SU-2014:1686-2)

2021-06-09 00:00:00

SUSE: Security Advisory (SUSE-SU-2014:1686-3)

2021-06-09 00:00:00

SUSE: Security Advisory (SUSE-SU-2014:1686-1)

2021-06-09 00:00:00

SOL15936 - NTP vulnerability CVE-2014-9295

2014-12-23 00:00:00

K15936 : NTP vulnerability CVE-2014-9295

2015-09-16 00:00:00

debiancve

CVE-2014-9295

2014-12-20 02:59:02

googleprojectzero

Finding and exploiting ntpd vulnerabilities

2015-01-02 00:00:00

checkpoint_advisories

NTP Daemon Configure Buffer Overflow (CVE-2014-9295)

2015-01-14 00:00:00

thn

First Time Ever Apple Automatically Pushes Security Patch for Mac OS

2014-12-23 22:17:00

prion

Stack overflow

2014-12-20 02:59:00

nessus

SuSE 11.3 Security Update : ntp (SAT Patch Number 10117)

2014-12-23 00:00:00

F5 Networks BIG-IP : NTP vulnerability (SOL15936)

2015-02-27 00:00:00

RHEL 4 : ntp (Unpatched Vulnerability)

2024-06-03 00:00:00

cvelist

CVE-2014-9295

2014-12-20 02:00:00

nvd

CVE-2014-9295

2014-12-20 02:59:02

ibm

Security Bulletin: A vulnerability in ntp affects IBM Flex System Manager (FSM): (CVE-2014-9295)

2019-01-31 01:45:01

Security Bulletin: IBM Netezza Host Management NTP vulnerabilities (CVE-2014-9293, CVE-2014-9294, CVE-2014-9295, CVE-2014-9296)

2019-10-18 03:10:29

Security Bulletin: Security Vulnerabilities in Network Time Protocol Daemon affect Intel Manycore Platform Software Stack for use on Intel Xeon Phi 3120A, Intel Xeon Phi 5110P, Intel Xeon Phi 7120A, and Intel Xeon Phi 7120P PCI-Express add-in cards

2019-01-31 01:45:01

cve

CVE-2014-9295

2014-12-20 02:59:02

ics

Network Time Protocol Vulnerabilities (Supplement Update A)

2015-03-05 12:00:00

Network Time Protocol Vulnerabilities (Update C)

2018-08-29 12:00:00

Network Time Protocol Vulnerabilities (Update B)

2018-09-10 12:00:00

oraclelinux

ntp security update

2014-12-20 00:00:00

ntp security update

2014-12-20 00:00:00

centos

ntp security update

2014-12-20 03:00:03

ntp, ntpdate, sntp security update

2014-12-20 02:57:22

redhat

(RHSA-2014:2025) Important: ntp security update

2014-12-20 00:00:00

(RHSA-2015:0104) Important: ntp security update

2015-01-28 00:00:00

(RHSA-2014:2024) Important: ntp security update

2014-12-20 00:00:00

aix

Network Time Protocol (NTP) vulnerability in AIX,Network Time Protocol (NTP) vulnerability in VIOS

2015-02-10 12:06:45

freebsd

ntp -- multiple vulnerabilities

2014-12-19 00:00:00

veracode

Weak Authentication

2019-05-02 05:06:18

Arbitrary Code Execution

2019-05-02 05:06:18

Authentication Bypass

2019-05-02 05:06:19

archlinux

ntp: multiple issues

2014-12-22 00:00:00

osv

ntp - security update

2014-12-20 00:00:00

ntp - security update

2014-12-20 00:00:00

freebsd_advisory

FreeBSD-SA-14:31.ntp

2014-12-23 00:00:00

mageia

Updated ntp packages fix security vulnerabilities

2014-12-20 16:51:12

fedora

[SECURITY] Fedora 21 Update: ntp-4.2.6p5-25.fc21

2014-12-23 18:28:40

[SECURITY] Fedora 19 Update: ntp-4.2.6p5-13.fc19

2014-12-31 19:00:28

[SECURITY] Fedora 20 Update: ntp-4.2.6p5-19.fc20

2014-12-22 02:37:36

ubuntu

NTP vulnerabilities

2014-12-22 00:00:00

gentoo

NTP: Multiple vulnerabilities

2014-12-24 00:00:00

slackware

[slackware-security] ntp

2014-12-23 05:38:39

arista

Security Advisory 0008

2015-01-09 00:00:00

amazon

Important: ntp

2014-12-19 14:00:00

checkpoint_security

Check Point response to NTP vulnerabilities (CVE-2014-9293, CVE-2014-9294, CVE-2014-9295, CVE-2014-9296)

2014-12-20 22:00:00

debian

[SECURITY] [DSA 3108-1] ntp security update

2014-12-20 20:37:23

[SECURITY] [DLA 116-1] ntp security update

2014-12-20 21:21:02

cisco

Multiple Vulnerabilities in ntpd Affecting Cisco Products

2014-12-22 16:00:00

cert

NTP Project Network Time Protocol daemon (ntpd) contains multiple vulnerabilities (Updated)

2014-12-19 00:00:00

oracle

Oracle Critical Patch Update - October 2016

2016-10-18 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.966

Percentile

99.6%

JSON

Related for UB:CVE-2014-9295