Read the docs
TI-2015-06753 Aliases CVE-2015-8138GHSA-5mf2-6mvq-v64v

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin…

Priority LOW 33CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat.

Summary

NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.

Why it matters now

EPSS 0.06255 93rd percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 90

CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:*:p5:*:*:*:*:*:*up to 4.2.8VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:*4.3.0VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:*4.3.1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:*4.3.2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:*4.3.3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:*4.3.4VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:*4.3.5VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:*4.3.6VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:*4.3.7VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:*4.3.8VulnerableNTP Project
  • cpe:2.3:a:ntp:ntp:*:p5:*:*:*:*:*:* Versions up to 4.2.8 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:* Versions 4.3.1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:* Versions 4.3.2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:* Versions 4.3.3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:* Versions 4.3.4 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:* Versions 4.3.5 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:* Versions 4.3.6 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:* Versions 4.3.7 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:* Versions 4.3.8 Vulnerable ·NTP Project
Show 80 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:*4.3.10VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:*4.3.11VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:*4.3.12VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:*4.3.13VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:*4.3.14VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:*4.3.15VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:*4.3.16VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:*4.3.17VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:*4.3.18VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:*4.3.19VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:*4.3.20VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:*4.3.21VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:*4.3.22VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:*4.3.23VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:*4.3.24VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:*4.3.25VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:*4.3.26VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:*4.3.27VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:*4.3.28VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:*4.3.29VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:*4.3.30VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:*4.3.31VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:*4.3.32VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:*4.3.33VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:*4.3.34VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:*4.3.35VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:*4.3.36VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:*4.3.37VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:*4.3.38VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:*4.3.39VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:*4.3.40VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:*4.3.41VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:*4.3.42VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:*4.3.43VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:*4.3.44VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:*4.3.45VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:*4.3.46VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:*4.3.47VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:*4.3.48VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:*4.3.49VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:*4.3.50VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:*4.3.51VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:*4.3.52VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:*4.3.53VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:*4.3.54VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:*4.3.55VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:*4.3.56VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:*4.3.57VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:*4.3.58VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:*4.3.59VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:*4.3.60VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:*4.3.61VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:*4.3.62VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:*4.3.63VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:*4.3.64VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:*4.3.65VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:*4.3.66VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:*4.3.67VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:*4.3.68VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:*4.3.69VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:*4.3.70VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:*4.3.71VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:*4.3.72VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:*4.3.73VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:*4.3.74VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:*4.3.75VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:*4.3.76VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:*4.3.77VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:*4.3.78VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:*4.3.79VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:*4.3.80VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:*4.3.81VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:*4.3.82VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:*4.3.83VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:*4.3.84VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:*4.3.85VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:*4.3.86VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:*4.3.87VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:*4.3.88VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:*4.3.89VulnerableNTP Project
  • cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:* Versions 4.3.10 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:* Versions 4.3.11 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:* Versions 4.3.12 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:* Versions 4.3.13 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:* Versions 4.3.14 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:* Versions 4.3.15 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:* Versions 4.3.16 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:* Versions 4.3.17 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:* Versions 4.3.18 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:* Versions 4.3.19 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:* Versions 4.3.20 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:* Versions 4.3.21 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:* Versions 4.3.22 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:* Versions 4.3.23 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:* Versions 4.3.24 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:* Versions 4.3.25 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:* Versions 4.3.26 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:* Versions 4.3.27 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:* Versions 4.3.28 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:* Versions 4.3.29 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:* Versions 4.3.30 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:* Versions 4.3.31 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:* Versions 4.3.32 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:* Versions 4.3.33 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:* Versions 4.3.34 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:* Versions 4.3.35 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:* Versions 4.3.36 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:* Versions 4.3.37 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:* Versions 4.3.38 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:* Versions 4.3.39 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:* Versions 4.3.40 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:* Versions 4.3.41 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:* Versions 4.3.42 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:* Versions 4.3.43 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:* Versions 4.3.44 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:* Versions 4.3.45 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:* Versions 4.3.46 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:* Versions 4.3.47 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:* Versions 4.3.48 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:* Versions 4.3.49 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:* Versions 4.3.50 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:* Versions 4.3.51 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:* Versions 4.3.52 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:* Versions 4.3.53 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:* Versions 4.3.54 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:* Versions 4.3.55 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:* Versions 4.3.56 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:* Versions 4.3.57 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:* Versions 4.3.58 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:* Versions 4.3.59 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:* Versions 4.3.60 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:* Versions 4.3.61 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:* Versions 4.3.62 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:* Versions 4.3.63 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:* Versions 4.3.64 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:* Versions 4.3.65 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:* Versions 4.3.66 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:* Versions 4.3.67 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:* Versions 4.3.68 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:* Versions 4.3.69 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:* Versions 4.3.70 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:* Versions 4.3.71 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:* Versions 4.3.72 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:* Versions 4.3.73 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:* Versions 4.3.74 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:* Versions 4.3.75 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:* Versions 4.3.76 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:* Versions 4.3.77 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:* Versions 4.3.78 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:* Versions 4.3.79 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:* Versions 4.3.80 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:* Versions 4.3.81 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:* Versions 4.3.82 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:* Versions 4.3.83 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:* Versions 4.3.84 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:* Versions 4.3.85 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:* Versions 4.3.86 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:* Versions 4.3.87 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:* Versions 4.3.88 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:* Versions 4.3.89 Vulnerable ·NTP Project

Remediation

Red Hat 1 advisory

  • RHSA-2016:0063 Released 2016-01-25 · Red Hat rating Important
    ntp security update
    • Red Hat Enterprise Linux Client (v. 7) ntp-4.2.6p5-22.el7_2.1, ntpdate-4.2.6p5-22.el7_2.1
    • Red Hat Enterprise Linux Client Optional (v. 7) ntp-doc-4.2.6p5-22.el7_2.1, ntp-perl-4.2.6p5-22.el7_2.1, sntp-4.2.6p5-22.el7_2.1
    • Red Hat Enterprise Linux ComputeNode (v. 7) ntp-4.2.6p5-22.el7_2.1, ntpdate-4.2.6p5-22.el7_2.1
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) ntp-doc-4.2.6p5-22.el7_2.1, ntp-perl-4.2.6p5-22.el7_2.1, sntp-4.2.6p5-22.el7_2.1
    • Red Hat Enterprise Linux Desktop (v. 6) ntp-4.2.6p5-5.el6_7.4, ntpdate-4.2.6p5-5.el6_7.4
    • Red Hat Enterprise Linux Desktop Optional (v. 6) ntp-doc-4.2.6p5-5.el6_7.4, ntp-perl-4.2.6p5-5.el6_7.4
    • Red Hat Enterprise Linux HPC Node (v. 6) ntp-4.2.6p5-5.el6_7.4, ntpdate-4.2.6p5-5.el6_7.4
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) ntp-doc-4.2.6p5-5.el6_7.4, ntp-perl-4.2.6p5-5.el6_7.4
    • Red Hat Enterprise Linux Server (v. 6) ntp-4.2.6p5-5.el6_7.4, ntpdate-4.2.6p5-5.el6_7.4
    • Red Hat Enterprise Linux Server (v. 7) ntp-4.2.6p5-22.el7_2.1, ntpdate-4.2.6p5-22.el7_2.1
    • Red Hat Enterprise Linux Server Optional (v. 6) ntp-doc-4.2.6p5-5.el6_7.4, ntp-perl-4.2.6p5-5.el6_7.4
    • Red Hat Enterprise Linux Server Optional (v. 7) ntp-doc-4.2.6p5-22.el7_2.1, ntp-perl-4.2.6p5-22.el7_2.1, sntp-4.2.6p5-22.el7_2.1
    • Red Hat Enterprise Linux Workstation (v. 6) ntp-4.2.6p5-5.el6_7.4, ntpdate-4.2.6p5-5.el6_7.4
    • Red Hat Enterprise Linux Workstation (v. 7) ntp-4.2.6p5-22.el7_2.1, ntpdate-4.2.6p5-22.el7_2.1
    • Red Hat Enterprise Linux Workstation Optional (v. 6) ntp-doc-4.2.6p5-5.el6_7.4, ntp-perl-4.2.6p5-5.el6_7.4
    • Red Hat Enterprise Linux Workstation Optional (v. 7) ntp-doc-4.2.6p5-22.el7_2.1, ntp-perl-4.2.6p5-22.el7_2.1, sntp-4.2.6p5-22.el7_2.1

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2016:0063
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2016:0063
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2016:0063
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2016:0063
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2016:0063
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2016:0063
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2016:0063
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2016:0063
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2016:0063
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2016:0063
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2016:0063
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2016:0063
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2016:0063
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2016:0063
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2016:0063
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2016:0063
Not affected: 1 product
  • Red Hat Enterprise Linux 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-8138
  2. 2026-10-03 Alias added: GHSA-5mf2-6mvq-v64v

References

Advisory 21

Other 9

  • TI-2015-06541 Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows… CVSS 3.1CRITICAL 9.8
  • TI-2014-07543 Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers… CVSS 2.0HIGH 7.5
  • TI-2013-04524 The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote… CVSS 2.0MEDIUM 5.0
  • TI-2016-06333 The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a… CVSS 3.1HIGH 7.5
  • TI-2018-08842 Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker… CVSS 3.0CRITICAL 9.8
  • TI-2016-04280 ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon… CVSS 3.1HIGH 7.5
See all 98 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences