Read the docs
TI-2014-04258 Aliases CVE-2014-5209GHSA-m44h-f944-f3x3

Information disclosure in NTP

Priority LOW 29CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
Will not fix Red Hat: no fix planned

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-200.

Summary

An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.

Why it matters now

EPSS 0.02502 84th percentileScored 2026-11-07
Fix Will not fix Red Hat: no fix planned

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
NTP ProjectNTP4.2.7p25—No fix listedCNA
  • NTP VendorNTP Project Affected 4.2.7p25 Fixed in — No fix listed CNA

CPE configurations NVD · 44

CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:4.2.7:p25:*:*:*:*:*:*4.2.7 p25VulnerableNTP Project
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*10.2.1 – 10.2.4; 11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0VulnerableF5
cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*11.2.1VulnerableF5
cpe:2.3:a:f5:big-ip_access_policy_manager:15.0.0:*:*:*:*:*:*:*15.0.0VulnerableF5
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0VulnerableF5
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.0.0:*:*:*:*:*:*:*15.0.0VulnerableF5
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0VulnerableF5
cpe:2.3:a:f5:big-ip_analytics:11.2.1:*:*:*:*:*:*:*11.2.1VulnerableF5
cpe:2.3:a:f5:big-ip_analytics:15.0.0:*:*:*:*:*:*:*15.0.0VulnerableF5
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0VulnerableF5
  • cpe:2.3:a:ntp:ntp:4.2.7:p25:*:*:*:*:*:* Versions 4.2.7 p25 Vulnerable ·NTP Project
  • cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* Versions 10.2.1 – 10.2.4; 11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:* Versions 11.2.1 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_access_policy_manager:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* Versions 11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* Versions 11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_analytics:11.2.1:*:*:*:*:*:*:* Versions 11.2.1 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_analytics:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* Versions 11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0 Vulnerable ·F5
Show 34 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.0.0:*:*:*:*:*:*:*15.0.0VulnerableF5
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*10.2.1 – 10.2.4; 11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0VulnerableF5
cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:*11.2.1VulnerableF5
cpe:2.3:a:f5:big-ip_application_security_manager:15.0.0:*:*:*:*:*:*:*15.0.0VulnerableF5
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0VulnerableF5
cpe:2.3:a:f5:big-ip_domain_name_system:15.0.0:*:*:*:*:*:*:*15.0.0VulnerableF5
cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*10.2.1 – 10.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*11.2.1VulnerableF5
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*10.2.1 – 10.2.4; 11.4.0 – 11.6.4VulnerableF5
cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.1:*:*:*:*:*:*:*11.2.1VulnerableF5
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*10.2.1 – 10.2.4; 11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0VulnerableF5
cpe:2.3:a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:*11.2.1VulnerableF5
cpe:2.3:a:f5:big-ip_link_controller:15.0.0:*:*:*:*:*:*:*15.0.0VulnerableF5
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*10.2.1 – 10.2.4; 11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0VulnerableF5
cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*11.2.1VulnerableF5
cpe:2.3:a:f5:big-ip_local_traffic_manager:15.0.0:*:*:*:*:*:*:*15.0.0VulnerableF5
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0VulnerableF5
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.0.0:*:*:*:*:*:*:*15.0.0VulnerableF5
cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:*10.2.1 – 10.2.4; 11.4.0 – 11.4.1VulnerableF5
cpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:*10.2.1 – 10.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.2.1:*:*:*:*:*:*:*11.2.1VulnerableF5
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*10.2.1 – 10.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:*11.2.1VulnerableF5
cpe:2.3:a:f5:big-iq_adc:4.5.0:*:*:*:*:*:*:*4.5.0VulnerableF5
cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*5.0.0 – 5.4.0; 6.0.0 – 6.1.0VulnerableF5
cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:*4.6.0VulnerableF5
cpe:2.3:a:f5:big-iq_cloud:*:*:*:*:*:*:*:*4.0.0 – 4.5.0VulnerableF5
cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableF5
cpe:2.3:a:f5:big-iq_device:*:*:*:*:*:*:*:*4.2.0 – 4.5.0VulnerableF5
cpe:2.3:a:f5:big-iq_security:*:*:*:*:*:*:*:*4.0.0 – 4.5.0VulnerableF5
cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:*3.1.1VulnerableF5
cpe:2.3:a:f5:iworkflow:*:*:*:*:*:*:*:*2.0.0 – 2.3.0VulnerableF5
cpe:2.3:a:f5:mobilesafe:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableF5
cpe:2.3:a:f5:websafe:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableF5
  • cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* Versions 10.2.1 – 10.2.4; 11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:* Versions 11.2.1 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_application_security_manager:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* Versions 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_domain_name_system:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* Versions 10.2.1 – 10.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:* Versions 11.2.1 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* Versions 10.2.1 – 10.2.4; 11.4.0 – 11.6.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.1:*:*:*:*:*:*:* Versions 11.2.1 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* Versions 10.2.1 – 10.2.4; 11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:* Versions 11.2.1 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_link_controller:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* Versions 10.2.1 – 10.2.4; 11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:* Versions 11.2.1 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* Versions 11.4.0 – 11.6.4; 12.0.0 – 12.1.4; 13.0.0 – 13.1.1; 14.0.0 – 14.1.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:* Versions 10.2.1 – 10.2.4; 11.4.0 – 11.4.1 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:* Versions 10.2.1 – 10.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.2.1:*:*:*:*:*:*:* Versions 11.2.1 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* Versions 10.2.1 – 10.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:* Versions 11.2.1 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_adc:4.5.0:*:*:*:*:*:*:* Versions 4.5.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:* Versions 5.0.0 – 5.4.0; 6.0.0 – 6.1.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:* Versions 4.6.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_cloud:*:*:*:*:*:*:*:* Versions 4.0.0 – 4.5.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_device:*:*:*:*:*:*:*:* Versions 4.2.0 – 4.5.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_security:*:*:*:*:*:*:*:* Versions 4.0.0 – 4.5.0 Vulnerable ·F5
  • cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·F5
  • cpe:2.3:a:f5:iworkflow:*:*:*:*:*:*:*:* Versions 2.0.0 – 2.3.0 Vulnerable ·F5
  • cpe:2.3:a:f5:mobilesafe:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·F5
  • cpe:2.3:a:f5:websafe:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·F5

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-5209
  2. 2026-10-03 Alias added: GHSA-m44h-f944-f3x3

References

Other 2

  • TI-2015-06541 Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows… CVSS 3.1CRITICAL 9.8
  • TI-2014-07543 Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers… CVSS 2.0HIGH 7.5
  • TI-2013-04524 The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote… CVSS 2.0MEDIUM 5.0
  • TI-2016-06333 The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a… CVSS 3.1HIGH 7.5
  • TI-2018-08842 Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker… CVSS 3.0CRITICAL 9.8
  • TI-2016-04280 ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon… CVSS 3.1HIGH 7.5
See all 98 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences