Total vulnerabilities in the database
The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.
| Software | From | Fixed in |
|---|---|---|
| ntp / ntp | 4.2.8-p5 | 4.2.8-p5.x |
| ntp / ntp | 4.2.8-p2 | 4.2.8-p2.x |
| ntp / ntp | 4.2.8-p3 | 4.2.8-p3.x |
| ntp / ntp | 4.2.8-p4 | 4.2.8-p4.x |
| ntp / ntp | 4.2.8-p7 | 4.2.8-p7.x |
| ntp / ntp | 4.2.8-p6 | 4.2.8-p6.x |
| ntp / ntp | 4.2.8-p1 | 4.2.8-p1.x |
| ntp / ntp | 4.2.8-p3-rc3 | 4.2.8-p3-rc3.x |
| ntp / ntp | 4.2.8-p3-rc2 | 4.2.8-p3-rc2.x |
| ntp / ntp | 4.2.8-p3-rc1 | 4.2.8-p3-rc1.x |
| ntp / ntp | 4.2.8-p2-rc3 | 4.2.8-p2-rc3.x |
| ntp / ntp | 4.2.8-p2-rc2 | 4.2.8-p2-rc2.x |
| ntp / ntp | 4.2.8-p2-rc1 | 4.2.8-p2-rc1.x |
| ntp / ntp | 4.2.8-p1-rc2 | 4.2.8-p1-rc2.x |
| ntp / ntp | 4.2.8-p1-rc1 | 4.2.8-p1-rc1.x |
| ntp / ntp | 4.2.8-p1-beta5 | 4.2.8-p1-beta5.x |
| ntp / ntp | 4.2.8-p1-beta4 | 4.2.8-p1-beta4.x |
| ntp / ntp | 4.2.8-p1-beta3 | 4.2.8-p1-beta3.x |
| ntp / ntp | 4.2.8-p1-beta2 | 4.2.8-p1-beta2.x |
| ntp / ntp | 4.2.8-p1-beta1 | 4.2.8-p1-beta1.x |
| ntp / ntp | 4.2.8 | 4.2.8.x |
| ntp / ntp | 4.2.0 | 4.2.8 |
| ntp / ntp | 4.3.0 | 4.3.93 |
| oracle / solaris | 11.3 | 11.3.x |
| oracle / solaris | 10 | 10.x |
| suse / linux_enterprise_server | 11-sp4 | 11-sp4.x |
| suse / openstack_cloud | 5 | 5.x |
| suse / manager_proxy | 2.1 | 2.1.x |
| suse / linux_enterprise_server | 11-sp3 | 11-sp3.x |
| suse / manager | 2.1 | 2.1.x |
| suse / linux_enterprise_server | 12-sp1 | 12-sp1.x |
| suse / linux_enterprise_server | 11-sp2 | 11-sp2.x |
| suse / linux_enterprise_desktop | 12-sp1 | 12-sp1.x |
| opensuse / leap | 42.1 | 42.1.x |
| opensuse / opensuse | 13.2 | 13.2.x |
| siemens / simatic_net_cp_443-1_opc_ua_firmware | - | - |
| siemens / tim_4r-ie_firmware | - | - |
| siemens / tim_4r-ie_dnp3_firmware | - | - |