Read the docs
TI-2016-06327 Aliases CVE-2016-7426GHSA-8wjh-3x3g-6pjf

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate…

Priority MEDIUM 47CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 16 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-400.

Summary

NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.

Why it matters now

EPSS 0.12367 96th percentileScored 2026-11-07
Fix Partial Red Hat: 1 advisoryRed Hat: 16 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 91

CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*4.2.6 to before 4.2.8; 4.3.0 to before 4.3.94VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p203:*:*:*:*:*:*4.2.5 p203VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p204:*:*:*:*:*:*4.2.5 p204VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p205:*:*:*:*:*:*4.2.5 p205VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p206:*:*:*:*:*:*4.2.5 p206VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p207:*:*:*:*:*:*4.2.5 p207VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p208:*:*:*:*:*:*4.2.5 p208VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p209:*:*:*:*:*:*4.2.5 p209VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p210:*:*:*:*:*:*4.2.5 p210VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p211:*:*:*:*:*:*4.2.5 p211VulnerableNTP Project
  • cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:* Versions 4.2.6 to before 4.2.8; 4.3.0 to before 4.3.94 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p203:*:*:*:*:*:* Versions 4.2.5 p203 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p204:*:*:*:*:*:* Versions 4.2.5 p204 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p205:*:*:*:*:*:* Versions 4.2.5 p205 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p206:*:*:*:*:*:* Versions 4.2.5 p206 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p207:*:*:*:*:*:* Versions 4.2.5 p207 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p208:*:*:*:*:*:* Versions 4.2.5 p208 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p209:*:*:*:*:*:* Versions 4.2.5 p209 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p210:*:*:*:*:*:* Versions 4.2.5 p210 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p211:*:*:*:*:*:* Versions 4.2.5 p211 Vulnerable ·NTP Project
Show 81 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:4.2.5:p212:*:*:*:*:*:*4.2.5 p212VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p213:*:*:*:*:*:*4.2.5 p213VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p214:*:*:*:*:*:*4.2.5 p214VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p215:*:*:*:*:*:*4.2.5 p215VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p216:*:*:*:*:*:*4.2.5 p216VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p217:*:*:*:*:*:*4.2.5 p217VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p218:*:*:*:*:*:*4.2.5 p218VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p219:*:*:*:*:*:*4.2.5 p219VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p220:*:*:*:*:*:*4.2.5 p220VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p221:*:*:*:*:*:*4.2.5 p221VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p222:*:*:*:*:*:*4.2.5 p222VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p223:*:*:*:*:*:*4.2.5 p223VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p224:*:*:*:*:*:*4.2.5 p224VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p225:*:*:*:*:*:*4.2.5 p225VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p226:*:*:*:*:*:*4.2.5 p226VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p227:*:*:*:*:*:*4.2.5 p227VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p228:*:*:*:*:*:*4.2.5 p228VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p229:*:*:*:*:*:*4.2.5 p229VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p230:*:*:*:*:*:*4.2.5 p230VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p231_rc1:*:*:*:*:*:*4.2.5 p231_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p232_rc1:*:*:*:*:*:*4.2.5 p232_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p233_rc1:*:*:*:*:*:*4.2.5 p233_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p234_rc1:*:*:*:*:*:*4.2.5 p234_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p235_rc1:*:*:*:*:*:*4.2.5 p235_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p236_rc1:*:*:*:*:*:*4.2.5 p236_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p237_rc1:*:*:*:*:*:*4.2.5 p237_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p238_rc1:*:*:*:*:*:*4.2.5 p238_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p239_rc1:*:*:*:*:*:*4.2.5 p239_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p240_rc1:*:*:*:*:*:*4.2.5 p240_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p241_rc1:*:*:*:*:*:*4.2.5 p241_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p242_rc1:*:*:*:*:*:*4.2.5 p242_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p243_rc1:*:*:*:*:*:*4.2.5 p243_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p244_rc1:*:*:*:*:*:*4.2.5 p244_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p245_rc1:*:*:*:*:*:*4.2.5 p245_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p246_rc1:*:*:*:*:*:*4.2.5 p246_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p247_rc1:*:*:*:*:*:*4.2.5 p247_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p248_rc1:*:*:*:*:*:*4.2.5 p248_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p249_rc1:*:*:*:*:*:*4.2.5 p249_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.5:p250_rc1:*:*:*:*:*:*4.2.5 p250_rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*4.2.8VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*4.2.8 p1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*4.2.8 p1-beta1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*4.2.8 p1-beta2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*4.2.8 p1-beta3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*4.2.8 p1-beta4VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*4.2.8 p1-beta5VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*4.2.8 p1-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*4.2.8 p1-rc2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*4.2.8 p2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*4.2.8 p2-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*4.2.8 p2-rc2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*4.2.8 p2-rc3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*4.2.8 p3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*4.2.8 p3-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*4.2.8 p3-rc2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*4.2.8 p3-rc3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*4.2.8 p4VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*4.2.8 p5VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:*4.2.8 p6VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*4.2.8 p7VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:*4.2.8 p8VulnerableNTP Project
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*12.04VulnerableCanonical
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*7.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*7.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*7.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*7.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:*b.11.31 to before c.4.2.8.2.0VulnerableHewlett Packard Enterprise (HPE)
  • cpe:2.3:a:ntp:ntp:4.2.5:p212:*:*:*:*:*:* Versions 4.2.5 p212 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p213:*:*:*:*:*:* Versions 4.2.5 p213 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p214:*:*:*:*:*:* Versions 4.2.5 p214 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p215:*:*:*:*:*:* Versions 4.2.5 p215 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p216:*:*:*:*:*:* Versions 4.2.5 p216 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p217:*:*:*:*:*:* Versions 4.2.5 p217 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p218:*:*:*:*:*:* Versions 4.2.5 p218 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p219:*:*:*:*:*:* Versions 4.2.5 p219 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p220:*:*:*:*:*:* Versions 4.2.5 p220 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p221:*:*:*:*:*:* Versions 4.2.5 p221 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p222:*:*:*:*:*:* Versions 4.2.5 p222 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p223:*:*:*:*:*:* Versions 4.2.5 p223 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p224:*:*:*:*:*:* Versions 4.2.5 p224 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p225:*:*:*:*:*:* Versions 4.2.5 p225 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p226:*:*:*:*:*:* Versions 4.2.5 p226 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p227:*:*:*:*:*:* Versions 4.2.5 p227 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p228:*:*:*:*:*:* Versions 4.2.5 p228 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p229:*:*:*:*:*:* Versions 4.2.5 p229 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p230:*:*:*:*:*:* Versions 4.2.5 p230 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p231_rc1:*:*:*:*:*:* Versions 4.2.5 p231_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p232_rc1:*:*:*:*:*:* Versions 4.2.5 p232_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p233_rc1:*:*:*:*:*:* Versions 4.2.5 p233_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p234_rc1:*:*:*:*:*:* Versions 4.2.5 p234_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p235_rc1:*:*:*:*:*:* Versions 4.2.5 p235_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p236_rc1:*:*:*:*:*:* Versions 4.2.5 p236_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p237_rc1:*:*:*:*:*:* Versions 4.2.5 p237_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p238_rc1:*:*:*:*:*:* Versions 4.2.5 p238_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p239_rc1:*:*:*:*:*:* Versions 4.2.5 p239_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p240_rc1:*:*:*:*:*:* Versions 4.2.5 p240_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p241_rc1:*:*:*:*:*:* Versions 4.2.5 p241_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p242_rc1:*:*:*:*:*:* Versions 4.2.5 p242_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p243_rc1:*:*:*:*:*:* Versions 4.2.5 p243_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p244_rc1:*:*:*:*:*:* Versions 4.2.5 p244_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p245_rc1:*:*:*:*:*:* Versions 4.2.5 p245_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p246_rc1:*:*:*:*:*:* Versions 4.2.5 p246_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p247_rc1:*:*:*:*:*:* Versions 4.2.5 p247_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p248_rc1:*:*:*:*:*:* Versions 4.2.5 p248_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p249_rc1:*:*:*:*:*:* Versions 4.2.5 p249_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.5:p250_rc1:*:*:*:*:*:* Versions 4.2.5 p250_rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:* Versions 4.2.8 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:* Versions 4.2.8 p1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:* Versions 4.2.8 p1-beta1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:* Versions 4.2.8 p1-beta2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:* Versions 4.2.8 p1-beta3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:* Versions 4.2.8 p1-beta4 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:* Versions 4.2.8 p1-beta5 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:* Versions 4.2.8 p1-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:* Versions 4.2.8 p1-rc2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:* Versions 4.2.8 p2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:* Versions 4.2.8 p2-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:* Versions 4.2.8 p2-rc2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:* Versions 4.2.8 p2-rc3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:* Versions 4.2.8 p3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:* Versions 4.2.8 p3-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:* Versions 4.2.8 p3-rc2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:* Versions 4.2.8 p3-rc3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:* Versions 4.2.8 p4 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:* Versions 4.2.8 p5 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:* Versions 4.2.8 p6 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:* Versions 4.2.8 p7 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:* Versions 4.2.8 p8 Vulnerable ·NTP Project
  • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* Versions 12.04 Vulnerable ·Canonical
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:a:hpe:hpux-ntp:*:*:*:*:*:*:*:* Versions b.11.31 to before c.4.2.8.2.0 Vulnerable ·Hewlett Packard Enterprise (HPE)

Remediation

Red Hat 1 advisory

  • RHSA-2017:0252 Released 2017-02-06 · Red Hat rating Moderate
    ntp security update
    • Red Hat Enterprise Linux Client (v. 7) ntp-4.2.6p5-25.el7_3.1, ntpdate-4.2.6p5-25.el7_3.1
    • Red Hat Enterprise Linux Client Optional (v. 7) ntp-doc-4.2.6p5-25.el7_3.1, ntp-perl-4.2.6p5-25.el7_3.1, sntp-4.2.6p5-25.el7_3.1
    • Red Hat Enterprise Linux ComputeNode (v. 7) ntp-4.2.6p5-25.el7_3.1, ntpdate-4.2.6p5-25.el7_3.1
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) ntp-doc-4.2.6p5-25.el7_3.1, ntp-perl-4.2.6p5-25.el7_3.1, sntp-4.2.6p5-25.el7_3.1
    • Red Hat Enterprise Linux Desktop (v. 6) ntp-4.2.6p5-10.el6_8.2, ntpdate-4.2.6p5-10.el6_8.2
    • Red Hat Enterprise Linux Desktop Optional (v. 6) ntp-doc-4.2.6p5-10.el6_8.2, ntp-perl-4.2.6p5-10.el6_8.2
    • Red Hat Enterprise Linux HPC Node (v. 6) ntp-4.2.6p5-10.el6_8.2, ntpdate-4.2.6p5-10.el6_8.2
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) ntp-doc-4.2.6p5-10.el6_8.2, ntp-perl-4.2.6p5-10.el6_8.2
    • Red Hat Enterprise Linux Server (v. 6) ntp-4.2.6p5-10.el6_8.2, ntpdate-4.2.6p5-10.el6_8.2
    • Red Hat Enterprise Linux Server (v. 7) ntp-4.2.6p5-25.el7_3.1, ntpdate-4.2.6p5-25.el7_3.1
    • Red Hat Enterprise Linux Server Optional (v. 6) ntp-doc-4.2.6p5-10.el6_8.2, ntp-perl-4.2.6p5-10.el6_8.2
    • Red Hat Enterprise Linux Server Optional (v. 7) ntp-doc-4.2.6p5-25.el7_3.1, ntp-perl-4.2.6p5-25.el7_3.1, sntp-4.2.6p5-25.el7_3.1
    • Red Hat Enterprise Linux Workstation (v. 6) ntp-4.2.6p5-10.el6_8.2, ntpdate-4.2.6p5-10.el6_8.2
    • Red Hat Enterprise Linux Workstation (v. 7) ntp-4.2.6p5-25.el7_3.1, ntpdate-4.2.6p5-25.el7_3.1
    • Red Hat Enterprise Linux Workstation Optional (v. 6) ntp-doc-4.2.6p5-10.el6_8.2, ntp-perl-4.2.6p5-10.el6_8.2
    • Red Hat Enterprise Linux Workstation Optional (v. 7) ntp-doc-4.2.6p5-25.el7_3.1, ntp-perl-4.2.6p5-25.el7_3.1, sntp-4.2.6p5-25.el7_3.1

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2017:0252
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2017:0252
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2017:0252
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2017:0252
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2017:0252
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2017:0252
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2017:0252
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2017:0252
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2017:0252
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2017:0252
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2017:0252
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2017:0252
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2017:0252
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2017:0252
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2017:0252
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2017:0252

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-7426
  2. 2026-10-03 Alias added: GHSA-8wjh-3x3g-6pjf

References

Advisory 9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences