Total vulnerabilities in the database
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.
| Software | From | Fixed in |
|---|---|---|
| opensuse / opensuse | 11.4 | 11.4.x |
| ntp / ntp | 4.2.7 | 4.2.7.x |
| ntp / ntp | 4.2.7-p3 | 4.2.7-p3.x |
| ntp / ntp | 4.2.7-p22 | 4.2.7-p22.x |
| ntp / ntp | 4.2.7-p15 | 4.2.7-p15.x |
| ntp / ntp | 4.2.7-p21 | 4.2.7-p21.x |
| ntp / ntp | 4.2.7-p13 | 4.2.7-p13.x |
| ntp / ntp | 4.2.7-p18 | 4.2.7-p18.x |
| ntp / ntp | 4.2.7-p4 | 4.2.7-p4.x |
| ntp / ntp | 4.2.7-p10 | 4.2.7-p10.x |
| ntp / ntp | 4.2.7-p20 | 4.2.7-p20.x |
| ntp / ntp | 4.2.7-p6 | 4.2.7-p6.x |
| ntp / ntp | 4.2.7-p19 | 4.2.7-p19.x |
| ntp / ntp | 4.2.7-p2 | 4.2.7-p2.x |
| ntp / ntp | 4.2.7-p7 | 4.2.7-p7.x |
| ntp / ntp | 4.2.7-p12 | 4.2.7-p12.x |
| ntp / ntp | 4.2.7-p14 | 4.2.7-p14.x |
| ntp / ntp | 4.2.7-p9 | 4.2.7-p9.x |
| ntp / ntp | 4.2.7-p24 | 4.2.7-p24.x |
| ntp / ntp | 4.2.7-p25 | 4.2.7-p25.x |
| ntp / ntp | 4.2.7-p1 | 4.2.7-p1.x |
| ntp / ntp | 4.2.7-p8 | 4.2.7-p8.x |
| ntp / ntp | 4.2.7-p11 | 4.2.7-p11.x |
| ntp / ntp | 4.2.7-p5 | 4.2.7-p5.x |
| ntp / ntp | 4.2.7-p17 | 4.2.7-p17.x |
| ntp / ntp | 4.2.7-p16 | 4.2.7-p16.x |
| ntp / ntp | 4.2.7-p0 | 4.2.7-p0.x |
| ntp / ntp | 4.2.7-p23 | 4.2.7-p23.x |
| ntp / ntp | - | 4.2.7 |
| oracle / linux | 6 | 6.x |
| oracle / linux | 7 | 7.x |