NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-2015-8138 regression.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 13, 2017 |
| Cisco Apic | — | Upgrade to the latest version of Cisco APIC to resolve this vulnerability. | May 11, 2026 | Nov 23, 2016 |
| Cisco Ise | — | — | Oct 21, 2025 | Nov 23, 2016 |
| Debian | — | Upgrade ntp | Jul 30, 2024 | Jan 13, 2017 |
| Freebsd | — | Upgrade ntpUpgrade FreeBSDUpgrade ntp-devel | Dec 22, 2016 | Dec 22, 2016 |
| Hpux | — | Update NTP.NTP-RUN to the latest versionUpdate NTP.NTP-AUX to the latest version | Aug 11, 2017 | Jan 13, 2017 |
| Ntp | — | Upgrade to the latest version of NTP | Feb 23, 2023 | Jan 13, 2017 |
| Oracle Solaris | — | Upgrade service/network/ntp to version 4.2.8.9-0.175.3.17.0.1.0 on Solaris 11.3 | May 29, 2017 | Jan 13, 2017 |
| Suse | — | Upgrade ntpUpgrade ntp-doc | Dec 20, 2016 | Dec 19, 2016 |
| Ubuntu | — | Upgrade ntp | Jul 6, 2017 | Jan 13, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub