vulnerability

NTP: Information Exposure (CVE-2014-5209)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published

Jan 8, 2020

Added

Feb 23, 2023

Modified

Mar 1, 2023

Description

An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.

Solution

ntp-upgrade-latest

References

CVE-2014-5209
https://attackerkb.com/topics/CVE-2014-5209
https://exchange.xforce.ibmcloud.com/vulnerabilities/95841
https://support.f5.com/csp/article/K44942017
https://support.f5.com/csp/article/K44942017?utm_source=f5support&amp;utm_medium=RSS

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report