The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3.12 Ntp_advisory | — | — | Nov 3, 2017 | Jan 2, 2014 |
| Aix 6.1.6 Ntp_advisory | — | — | Nov 3, 2017 | Jan 2, 2014 |
| Aix 6.1.7 Ntp_advisory | — | — | Nov 3, 2017 | Jan 2, 2014 |
| Aix 6.1.8 Ntp_advisory | — | — | Nov 3, 2017 | Jan 2, 2014 |
| Aix 6.1.9 Ntp_advisory | — | — | Nov 3, 2017 | Jan 2, 2014 |
| Aix 7.1.0 Ntp_advisory | — | — | Nov 3, 2017 | Jan 2, 2014 |
| Aix 7.1.1 Ntp_advisory | — | — | Nov 3, 2017 | Jan 2, 2014 |
| Aix 7.1.2 Ntp_advisory | — | — | Nov 3, 2017 | Jan 2, 2014 |
| Aix 7.1.3 Ntp_advisory | — | — | Nov 3, 2017 | Jan 2, 2014 |
| Amazon Linux Ami 2 | — | Upgrade ntp-perlUpgrade ntpdateUpgrade ntp-docUpgrade ntp-debuginfoUpgrade sntpUpgrade ntp | Sep 16, 2021 | Jan 2, 2014 |
| Amazon_linux | — | Upgrade ntp | Oct 27, 2023 | Jan 2, 2014 |
| Debian | — | Upgrade ntp | Jul 30, 2024 | Jan 2, 2014 |
| Freebsd | — | Upgrade ntpUpgrade FreeBSD | Dec 10, 2025 | Jan 14, 2014 |
| Gentoo Linux | — | Upgrade net-misc/ntp. | Oct 30, 2017 | Jan 2, 2014 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sntpUpgrade ntpdateUpgrade ntp | Mar 24, 2020 | Jan 2, 2014 |
| Ibm Aix | — | Apply the fix or workaround for ntp_advisory | Nov 30, 2017 | Jan 2, 2014 |
| Ntp | — | Upgrade to the latest version of NTP | Feb 23, 2023 | Jan 2, 2014 |
| Ntp Monlist Dos | — | Disable NTP queriesUpdate ntpd 4.2.7x to ntpd 4.2.7p26 or greater | Mar 19, 2014 | Jan 2, 2014 |
| Oracle Solaris | — | Upgrade service/network/ntp to version 4.2.7.381-0.175.1.13.0.4.0 on Solaris 11.1 | May 29, 2017 | Jan 2, 2014 |
| Oracle_linux | — | Upgrade ntp-docUpgrade ntpUpgrade ntp-perlUpgrade ntpdateUpgrade sntp | Sep 9, 2016 | Jan 2, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 20, 2010 |
| Suse | — | Upgrade ntp-docUpgrade ntp | Feb 17, 2015 | Jan 2, 2014 |
| Vmsa 2014 0002 | — | Upgrade VMware ESXi 5.1 to build number 1743201Upgrade VMware ESXi 5.0 to build number 1749766Upgrade VMware ESX 4.1 to build number 1682698Upgrade VMware ESXi 4.1 to build number 1682698Upgrade VMware ESX 4.0 to build number 1682696Upgrade VMware ESXi 4.0 to build number 1682696Upgrade VMware ESXi 5.5 to build number 1623387 | Oct 28, 2015 | Jan 2, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub