Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Networktime | — | Upgrade macOS to the latest versionApply OS X security update 2009-002 | Dec 16, 2011 | Apr 14, 2009 |
| Centos_linux | — | Upgrade ntp | Dec 1, 2016 | Apr 14, 2009 |
| Debian | — | Upgrade ntp | Jul 30, 2024 | Apr 14, 2009 |
| Freebsd | — | Upgrade ntp | Dec 10, 2025 | May 20, 2009 |
| Gentoo Linux | — | Upgrade net-misc/ntp. | Oct 30, 2017 | Apr 14, 2009 |
| Hpux | — | Apply patch PHNE_42470 from HPApply patch PHNE_39872 from HPUpdate NTP.INETSVCS2-BOOT to the latest versionApply patch PHNE_39873 from HPUpdate NTP.NTP-AUX to the latest versionApply patch PHNE_39871 from HPUpdate NTP.NTP-RUN to the latest version | Aug 11, 2017 | Apr 14, 2009 |
| Ntp | — | Upgrade to the latest version of NTP | Feb 23, 2023 | Apr 14, 2009 |
| Oracle_linux | — | Upgrade ntp | Oct 16, 2024 | Apr 14, 2009 |
| Suse | — | Upgrade ntpUpgrade ntp-doc | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade ntpUpgrade ntp-server | Nov 8, 2024 | Apr 14, 2009 |
| Vmsa 2009 0016 5 Service Console Update | — | Upgrade VMware ESXi 4.0 to build number 208167Upgrade VMware ESXi 3.5 to build number 226117Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Apr 14, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub