CVE-2019-8936
NTP through 4.2.8p12 has a NULL Pointer Dereference.
- Update to 1:4.2.8p10+dfsg-5ubuntu7.3
Published Updated
PatchFirst · Latest vulnerabilities
ntp vulnerabilities
Vulnerabilities published for ntp in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 5
CVE-2018-7183
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.
- Update to 1:4.2.8p10+dfsg-5ubuntu7.1
Published UpdatedCVE-2018-7185
The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.
- Update to 1:4.2.8p10+dfsg-5ubuntu7.1
Published UpdatedCVE-2018-7184
ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.
- Update to 1:4.2.8p10+dfsg-5ubuntu7.1
Published UpdatedCVE-2018-7182
The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.
- Update to 1:4.2.8p10+dfsg-5ubuntu7.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.