Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

Vulnerability IntelligenceCVE-2016-9311

CVE-2016-9311

MEDIUM5.9

ntpd in NTP before 4

Published Jan 13, 2017

Modified 1 years ago

Details

ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted packet.

References

WEB

http://nwtime.org/ntp428p9_release/

ADVISORY

http://rhn.redhat.com/errata/RHSA-2017-0252.html

WEB

http://support.ntp.org/bin/view/Main/NtpBug3119

WEB

http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

WEB

http://www.securityfocus.com/bid/94444

WEB

http://www.securitytracker.com/id/1037354

WEB

https://bto.bluecoat.com/security-advisory/sa139

WEB

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us

ADVISORY

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc

WEB

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03799en_us

WEB

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03885en_us

ADVISORY

https://usn.ubuntu.com/3707-2/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2016-9311

ADVISORY

https://www.kb.cert.org/vuls/id/633847

CVSS Analysis

CVSS v3.0

5.9

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedJan 13, 2017

ModifiedAug 6, 2024

CVE-2016-9311 | Mondoo Vulnerability Intelligence