Read the docs
TI-2009-01187 Aliases CVE-2009-1252GHSA-x2p2-g54c-2jqg

Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP…

Priority MEDIUM 49CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-119 and the CVSS impact.

Summary

Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.

Why it matters now

EPSS 0.21286 97th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 78

CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:4.2.4p0:*:*:*:*:*:*:*4.2.4p0VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.4p1:*:*:*:*:*:*:*4.2.4p1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.4p2:*:*:*:*:*:*:*4.2.4p2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.4p3:*:*:*:*:*:*:*4.2.4p3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.4p4:*:*:*:*:*:*:*4.2.4p4VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.4p5:*:*:*:*:*:*:*4.2.4p5VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.4p6:*:*:*:*:*:*:*4.2.4p6VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p0:*:*:*:*:*:*:*4.2.5p0VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p1:*:*:*:*:*:*:*4.2.5p1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p2:*:*:*:*:*:*:*4.2.5p2VulnerableNTP Project
  • cpe:2.3:a:ntp:ntp:4.2.4p0:*:*:*:*:*:*:* Versions 4.2.4p0 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.4p1:*:*:*:*:*:*:* Versions 4.2.4p1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.4p2:*:*:*:*:*:*:* Versions 4.2.4p2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.4p3:*:*:*:*:*:*:* Versions 4.2.4p3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.4p4:*:*:*:*:*:*:* Versions 4.2.4p4 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.4p5:*:*:*:*:*:*:* Versions 4.2.4p5 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.4p6:*:*:*:*:*:*:* Versions 4.2.4p6 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p0:*:*:*:*:*:*:* Versions 4.2.5p0 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p1:*:*:*:*:*:*:* Versions 4.2.5p1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p2:*:*:*:*:*:*:* Versions 4.2.5p2 Vulnerable ·NTP Project
Show 68 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:4.2.5p3:*:*:*:*:*:*:*4.2.5p3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p4:*:*:*:*:*:*:*4.2.5p4VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p5:*:*:*:*:*:*:*4.2.5p5VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p6:*:*:*:*:*:*:*4.2.5p6VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p7:*:*:*:*:*:*:*4.2.5p7VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p8:*:*:*:*:*:*:*4.2.5p8VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p9:*:*:*:*:*:*:*4.2.5p9VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p10:*:*:*:*:*:*:*4.2.5p10VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p11:*:*:*:*:*:*:*4.2.5p11VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p12:*:*:*:*:*:*:*4.2.5p12VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p13:*:*:*:*:*:*:*4.2.5p13VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p14:*:*:*:*:*:*:*4.2.5p14VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p15:*:*:*:*:*:*:*4.2.5p15VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p16:*:*:*:*:*:*:*4.2.5p16VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p17:*:*:*:*:*:*:*4.2.5p17VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p18:*:*:*:*:*:*:*4.2.5p18VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p19:*:*:*:*:*:*:*4.2.5p19VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p20:*:*:*:*:*:*:*4.2.5p20VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p21:*:*:*:*:*:*:*4.2.5p21VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p23:*:*:*:*:*:*:*4.2.5p23VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p24:*:*:*:*:*:*:*4.2.5p24VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p25:*:*:*:*:*:*:*4.2.5p25VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p26:*:*:*:*:*:*:*4.2.5p26VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p27:*:*:*:*:*:*:*4.2.5p27VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p28:*:*:*:*:*:*:*4.2.5p28VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p29:*:*:*:*:*:*:*4.2.5p29VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p30:*:*:*:*:*:*:*4.2.5p30VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p31:*:*:*:*:*:*:*4.2.5p31VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p32:*:*:*:*:*:*:*4.2.5p32VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p33:*:*:*:*:*:*:*4.2.5p33VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p35:*:*:*:*:*:*:*4.2.5p35VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p36:*:*:*:*:*:*:*4.2.5p36VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p37:*:*:*:*:*:*:*4.2.5p37VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p38:*:*:*:*:*:*:*4.2.5p38VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p39:*:*:*:*:*:*:*4.2.5p39VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p40:*:*:*:*:*:*:*4.2.5p40VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p41:*:*:*:*:*:*:*4.2.5p41VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p42:*:*:*:*:*:*:*4.2.5p42VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p43:*:*:*:*:*:*:*4.2.5p43VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p44:*:*:*:*:*:*:*4.2.5p44VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p45:*:*:*:*:*:*:*4.2.5p45VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p46:*:*:*:*:*:*:*4.2.5p46VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p47:*:*:*:*:*:*:*4.2.5p47VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p48:*:*:*:*:*:*:*4.2.5p48VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p49:*:*:*:*:*:*:*4.2.5p49VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p50:*:*:*:*:*:*:*4.2.5p50VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p51:*:*:*:*:*:*:*4.2.5p51VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p52:*:*:*:*:*:*:*4.2.5p52VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p53:*:*:*:*:*:*:*4.2.5p53VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p54:*:*:*:*:*:*:*4.2.5p54VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p55:*:*:*:*:*:*:*4.2.5p55VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p56:*:*:*:*:*:*:*4.2.5p56VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p57:*:*:*:*:*:*:*4.2.5p57VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p58:*:*:*:*:*:*:*4.2.5p58VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p59:*:*:*:*:*:*:*4.2.5p59VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p60:*:*:*:*:*:*:*4.2.5p60VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p61:*:*:*:*:*:*:*4.2.5p61VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p62:*:*:*:*:*:*:*4.2.5p62VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p63:*:*:*:*:*:*:*4.2.5p63VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p64:*:*:*:*:*:*:*4.2.5p64VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p65:*:*:*:*:*:*:*4.2.5p65VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p66:*:*:*:*:*:*:*4.2.5p66VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p67:*:*:*:*:*:*:*4.2.5p67VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p68:*:*:*:*:*:*:*4.2.5p68VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p69:*:*:*:*:*:*:*4.2.5p69VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p70:*:*:*:*:*:*:*4.2.5p70VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p71:*:*:*:*:*:*:*4.2.5p71VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5p73:*:*:*:*:*:*:*4.2.5p73VulnerableNTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p3:*:*:*:*:*:*:* Versions 4.2.5p3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p4:*:*:*:*:*:*:* Versions 4.2.5p4 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p5:*:*:*:*:*:*:* Versions 4.2.5p5 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p6:*:*:*:*:*:*:* Versions 4.2.5p6 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p7:*:*:*:*:*:*:* Versions 4.2.5p7 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p8:*:*:*:*:*:*:* Versions 4.2.5p8 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p9:*:*:*:*:*:*:* Versions 4.2.5p9 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p10:*:*:*:*:*:*:* Versions 4.2.5p10 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p11:*:*:*:*:*:*:* Versions 4.2.5p11 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p12:*:*:*:*:*:*:* Versions 4.2.5p12 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p13:*:*:*:*:*:*:* Versions 4.2.5p13 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p14:*:*:*:*:*:*:* Versions 4.2.5p14 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p15:*:*:*:*:*:*:* Versions 4.2.5p15 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p16:*:*:*:*:*:*:* Versions 4.2.5p16 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p17:*:*:*:*:*:*:* Versions 4.2.5p17 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p18:*:*:*:*:*:*:* Versions 4.2.5p18 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p19:*:*:*:*:*:*:* Versions 4.2.5p19 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p20:*:*:*:*:*:*:* Versions 4.2.5p20 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p21:*:*:*:*:*:*:* Versions 4.2.5p21 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p23:*:*:*:*:*:*:* Versions 4.2.5p23 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p24:*:*:*:*:*:*:* Versions 4.2.5p24 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p25:*:*:*:*:*:*:* Versions 4.2.5p25 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p26:*:*:*:*:*:*:* Versions 4.2.5p26 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p27:*:*:*:*:*:*:* Versions 4.2.5p27 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p28:*:*:*:*:*:*:* Versions 4.2.5p28 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p29:*:*:*:*:*:*:* Versions 4.2.5p29 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p30:*:*:*:*:*:*:* Versions 4.2.5p30 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p31:*:*:*:*:*:*:* Versions 4.2.5p31 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p32:*:*:*:*:*:*:* Versions 4.2.5p32 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p33:*:*:*:*:*:*:* Versions 4.2.5p33 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p35:*:*:*:*:*:*:* Versions 4.2.5p35 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p36:*:*:*:*:*:*:* Versions 4.2.5p36 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p37:*:*:*:*:*:*:* Versions 4.2.5p37 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p38:*:*:*:*:*:*:* Versions 4.2.5p38 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p39:*:*:*:*:*:*:* Versions 4.2.5p39 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p40:*:*:*:*:*:*:* Versions 4.2.5p40 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p41:*:*:*:*:*:*:* Versions 4.2.5p41 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p42:*:*:*:*:*:*:* Versions 4.2.5p42 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p43:*:*:*:*:*:*:* Versions 4.2.5p43 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p44:*:*:*:*:*:*:* Versions 4.2.5p44 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p45:*:*:*:*:*:*:* Versions 4.2.5p45 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p46:*:*:*:*:*:*:* Versions 4.2.5p46 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p47:*:*:*:*:*:*:* Versions 4.2.5p47 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p48:*:*:*:*:*:*:* Versions 4.2.5p48 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p49:*:*:*:*:*:*:* Versions 4.2.5p49 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p50:*:*:*:*:*:*:* Versions 4.2.5p50 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p51:*:*:*:*:*:*:* Versions 4.2.5p51 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p52:*:*:*:*:*:*:* Versions 4.2.5p52 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p53:*:*:*:*:*:*:* Versions 4.2.5p53 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p54:*:*:*:*:*:*:* Versions 4.2.5p54 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p55:*:*:*:*:*:*:* Versions 4.2.5p55 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p56:*:*:*:*:*:*:* Versions 4.2.5p56 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p57:*:*:*:*:*:*:* Versions 4.2.5p57 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p58:*:*:*:*:*:*:* Versions 4.2.5p58 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p59:*:*:*:*:*:*:* Versions 4.2.5p59 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p60:*:*:*:*:*:*:* Versions 4.2.5p60 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p61:*:*:*:*:*:*:* Versions 4.2.5p61 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p62:*:*:*:*:*:*:* Versions 4.2.5p62 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p63:*:*:*:*:*:*:* Versions 4.2.5p63 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p64:*:*:*:*:*:*:* Versions 4.2.5p64 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p65:*:*:*:*:*:*:* Versions 4.2.5p65 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p66:*:*:*:*:*:*:* Versions 4.2.5p66 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p67:*:*:*:*:*:*:* Versions 4.2.5p67 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p68:*:*:*:*:*:*:* Versions 4.2.5p68 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p69:*:*:*:*:*:*:* Versions 4.2.5p69 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p70:*:*:*:*:*:*:* Versions 4.2.5p70 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p71:*:*:*:*:*:*:* Versions 4.2.5p71 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5p73:*:*:*:*:*:*:* Versions 4.2.5p73 Vulnerable ·NTP Project

Remediation

Red Hat 2 advisories

  • RHSA-2009:1040 Released 2009-05-18 · Red Hat rating Critical
    ntp security update
    • Red Hat Enterprise Linux AS EUS (v. 4.7) ntp-4.2.0.a.20040617-8.el4_7.2, ntp-4.2.0.a.20040617-8.el4_7.2.i386, ntp-4.2.0.a.20040617-8.el4_7.2.ia64 +1
    • Red Hat Enterprise Linux AS version 4 ntp-4.2.0.a.20040617-8.el4_7.2, ntp-4.2.0.a.20040617-8.el4_7.2.i386, ntp-4.2.0.a.20040617-8.el4_7.2.ia64 +1
    • Red Hat Enterprise Linux Desktop version 4 ntp-4.2.0.a.20040617-8.el4_7.2, ntp-4.2.0.a.20040617-8.el4_7.2.i386
    • Red Hat Enterprise Linux ES EUS (v. 4.7) ntp-4.2.0.a.20040617-8.el4_7.2, ntp-4.2.0.a.20040617-8.el4_7.2.i386, ntp-4.2.0.a.20040617-8.el4_7.2.ia64
    • Red Hat Enterprise Linux ES version 4 ntp-4.2.0.a.20040617-8.el4_7.2, ntp-4.2.0.a.20040617-8.el4_7.2.i386, ntp-4.2.0.a.20040617-8.el4_7.2.ia64
    • Red Hat Enterprise Linux WS version 4 ntp-4.2.0.a.20040617-8.el4_7.2, ntp-4.2.0.a.20040617-8.el4_7.2.i386, ntp-4.2.0.a.20040617-8.el4_7.2.ia64
  • RHSA-2009:1039 Released 2009-05-18 · Red Hat rating Important
    ntp security update
    • Red Hat Enterprise Linux (v. 5 server) ntp-4.2.2p1-9.el5_3.2, ntp-4.2.2p1-9.el5_3.2.i386, ntp-4.2.2p1-9.el5_3.2.ia64 +1
    • Red Hat Enterprise Linux Desktop (v. 5 client) ntp-4.2.2p1-9.el5_3.2, ntp-4.2.2p1-9.el5_3.2.i386

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2009:1039
Red Hat Enterprise Linux AS EUS (v. 4.7)Fixed RHSA-2009:1040
Red Hat Enterprise Linux AS version 4Fixed RHSA-2009:1040
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2009:1039
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2009:1040
Red Hat Enterprise Linux ES EUS (v. 4.7)Fixed RHSA-2009:1040
Red Hat Enterprise Linux ES version 4Fixed RHSA-2009:1040
Red Hat Enterprise Linux WS version 4Fixed RHSA-2009:1040

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-1252
  2. 2026-10-03 Alias added: GHSA-x2p2-g54c-2jqg

References

Patch 3

Advisory 11

Other 8

  • TI-2015-06541 Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows… CVSS 3.1CRITICAL 9.8
  • TI-2014-07543 Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers… CVSS 2.0HIGH 7.5
  • TI-2013-04524 The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote… CVSS 2.0MEDIUM 5.0
  • TI-2016-06333 The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a… CVSS 3.1HIGH 7.5
  • TI-2018-08842 Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker… CVSS 3.0CRITICAL 9.8
  • TI-2016-04280 ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon… CVSS 3.1HIGH 7.5
See all 98 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences