Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-ntpamazon-linux-ami-2-upgrade-ntp-debuginfoamazon-linux-ami-2-upgrade-ntp-docamazon-linux-ami-2-upgrade-ntp-perlamazon-linux-ami-2-upgrade-ntpdateamazon-linux-ami-2-upgrade-sntp | Apr 27, 2020 | Jun 20, 2018 | |
| Amazon_linux | — | amazon-linux-upgrade-ntp | Sep 20, 2018 | Jun 20, 2018 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jun 20, 2018 | |
| Centos_linux | — | centos-upgrade-ntpcentos-upgrade-ntp-debuginfocentos-upgrade-ntp-doccentos-upgrade-ntp-perlcentos-upgrade-ntpdatecentos-upgrade-sntp | Dec 21, 2018 | Jun 20, 2018 |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Jun 20, 2018 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-ntp | Mar 20, 2019 | Jun 20, 2018 | |
| Hpux | — | hpux-update-ntp | Dec 9, 2019 | Jun 20, 2018 |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-ntphuawei-euleros-2_0_sp2-upgrade-ntpdate | Feb 22, 2019 | Jun 20, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-ntphuawei-euleros-2_0_sp3-upgrade-ntpdatehuawei-euleros-2_0_sp3-upgrade-sntp | Feb 15, 2019 | Jun 20, 2018 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-ntphuawei-euleros-2_0_sp5-upgrade-ntpdate | Jan 9, 2019 | Jun 20, 2018 | |
| Ibm Aix | ibm-aix-ntp_advisory11 | Dec 18, 2018 | Jun 20, 2018 | |
| Ntp | ntp-upgrade-latest | Feb 23, 2023 | Jun 20, 2018 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-service-network-ntp-4-2-8-12-11-4-8-0-1-3-0 | Apr 17, 2019 | Jun 20, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-ntporacle-linux-upgrade-ntpdateoracle-linux-upgrade-ntp-docoracle-linux-upgrade-ntp-perloracle-linux-upgrade-sntp | Dec 20, 2018 | Jun 20, 2018 |
| Redhat_linux | — | redhat-upgrade-ntpredhat-upgrade-ntp-debuginforedhat-upgrade-ntp-docredhat-upgrade-ntp-perlredhat-upgrade-ntpdateredhat-upgrade-sntp | Dec 20, 2018 | Jun 20, 2018 |
| Suse | — | suse-upgrade-ntpsuse-upgrade-ntp-doc | Oct 24, 2018 | Jun 20, 2018 |
| Ubuntu | ubuntu-pro-upgrade-ntpubuntu-pro-upgrade-ntpdateubuntu-pro-upgrade-sntpubuntu-upgrade-ntp | Jan 10, 2020 | Jun 20, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub