Read the docs
TI-2017-04250 Aliases CVE-2017-6452GHSA-q9v2-7fch-g9q6

Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x…

Priority LOW 34CWE-119Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line.

Why it matters now

EPSS 0.00446 38th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 95

CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*4.2.8 p9VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:*4.3.0VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:*4.3.1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:*4.3.2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:*4.3.3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:*4.3.4VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:*4.3.5VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:*4.3.6VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:*4.3.7VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:*4.3.8VulnerableNTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:* Versions 4.2.8 p9 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:* Versions 4.3.1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:* Versions 4.3.2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:* Versions 4.3.3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:* Versions 4.3.4 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:* Versions 4.3.5 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:* Versions 4.3.6 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:* Versions 4.3.7 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:* Versions 4.3.8 Vulnerable ·NTP Project
Show 85 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:4.3.9:*:*:*:*:*:*:*4.3.9VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:*4.3.10VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:*4.3.11VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:*4.3.12VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:*4.3.13VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:*4.3.14VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:*4.3.15VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:*4.3.16VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:*4.3.17VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:*4.3.18VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:*4.3.19VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:*4.3.20VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:*4.3.21VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:*4.3.22VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:*4.3.23VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:*4.3.24VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:*4.3.25VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:*4.3.26VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:*4.3.27VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:*4.3.28VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:*4.3.29VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:*4.3.30VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:*4.3.31VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:*4.3.32VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:*4.3.33VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:*4.3.34VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:*4.3.35VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:*4.3.36VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:*4.3.37VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:*4.3.38VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:*4.3.39VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:*4.3.40VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:*4.3.41VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:*4.3.42VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:*4.3.43VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:*4.3.44VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:*4.3.45VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:*4.3.46VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:*4.3.47VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:*4.3.48VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:*4.3.49VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:*4.3.50VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:*4.3.51VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:*4.3.52VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:*4.3.53VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:*4.3.54VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:*4.3.55VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:*4.3.56VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:*4.3.57VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:*4.3.58VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:*4.3.59VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:*4.3.60VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:*4.3.61VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:*4.3.62VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:*4.3.63VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:*4.3.64VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:*4.3.65VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:*4.3.66VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:*4.3.67VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:*4.3.68VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:*4.3.69VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:*4.3.70VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:*4.3.71VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:*4.3.72VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:*4.3.73VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:*4.3.74VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:*4.3.75VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:*4.3.76VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:*4.3.77VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:*4.3.78VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:*4.3.79VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:*4.3.80VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:*4.3.81VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:*4.3.82VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:*4.3.83VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:*4.3.84VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:*4.3.85VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:*4.3.86VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:*4.3.87VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:*4.3.88VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:*4.3.89VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.90:*:*:*:*:*:*:*4.3.90VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.91:*:*:*:*:*:*:*4.3.91VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.92:*:*:*:*:*:*:*4.3.92VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.93:*:*:*:*:*:*:*4.3.93VulnerableNTP Project
  • cpe:2.3:a:ntp:ntp:4.3.9:*:*:*:*:*:*:* Versions 4.3.9 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:* Versions 4.3.10 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:* Versions 4.3.11 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:* Versions 4.3.12 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:* Versions 4.3.13 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:* Versions 4.3.14 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:* Versions 4.3.15 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:* Versions 4.3.16 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:* Versions 4.3.17 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:* Versions 4.3.18 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:* Versions 4.3.19 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:* Versions 4.3.20 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:* Versions 4.3.21 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:* Versions 4.3.22 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:* Versions 4.3.23 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:* Versions 4.3.24 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:* Versions 4.3.25 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:* Versions 4.3.26 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:* Versions 4.3.27 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:* Versions 4.3.28 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:* Versions 4.3.29 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:* Versions 4.3.30 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:* Versions 4.3.31 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:* Versions 4.3.32 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:* Versions 4.3.33 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:* Versions 4.3.34 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:* Versions 4.3.35 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:* Versions 4.3.36 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:* Versions 4.3.37 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:* Versions 4.3.38 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:* Versions 4.3.39 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:* Versions 4.3.40 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:* Versions 4.3.41 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:* Versions 4.3.42 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:* Versions 4.3.43 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:* Versions 4.3.44 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:* Versions 4.3.45 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:* Versions 4.3.46 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:* Versions 4.3.47 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:* Versions 4.3.48 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:* Versions 4.3.49 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:* Versions 4.3.50 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:* Versions 4.3.51 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:* Versions 4.3.52 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:* Versions 4.3.53 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:* Versions 4.3.54 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:* Versions 4.3.55 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:* Versions 4.3.56 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:* Versions 4.3.57 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:* Versions 4.3.58 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:* Versions 4.3.59 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:* Versions 4.3.60 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:* Versions 4.3.61 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:* Versions 4.3.62 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:* Versions 4.3.63 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:* Versions 4.3.64 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:* Versions 4.3.65 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:* Versions 4.3.66 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:* Versions 4.3.67 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:* Versions 4.3.68 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:* Versions 4.3.69 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:* Versions 4.3.70 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:* Versions 4.3.71 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:* Versions 4.3.72 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:* Versions 4.3.73 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:* Versions 4.3.74 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:* Versions 4.3.75 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:* Versions 4.3.76 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:* Versions 4.3.77 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:* Versions 4.3.78 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:* Versions 4.3.79 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:* Versions 4.3.80 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:* Versions 4.3.81 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:* Versions 4.3.82 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:* Versions 4.3.83 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:* Versions 4.3.84 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:* Versions 4.3.85 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:* Versions 4.3.86 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:* Versions 4.3.87 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:* Versions 4.3.88 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:* Versions 4.3.89 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.90:*:*:*:*:*:*:* Versions 4.3.90 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.91:*:*:*:*:*:*:* Versions 4.3.91 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.92:*:*:*:*:*:*:* Versions 4.3.92 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.93:*:*:*:*:*:*:* Versions 4.3.93 Vulnerable ·NTP Project

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

Not affected: 3 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-6452
  2. 2026-10-03 Alias added: GHSA-q9v2-7fch-g9q6

References

Patch 1

Advisory 1

Other 1

  • TI-2015-06541 Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows… CVSS 3.1CRITICAL 9.8
  • TI-2014-07543 Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers… CVSS 2.0HIGH 7.5
  • TI-2013-04524 The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote… CVSS 2.0MEDIUM 5.0
  • TI-2016-06333 The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a… CVSS 3.1HIGH 7.5
  • TI-2018-08842 Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker… CVSS 3.0CRITICAL 9.8
  • TI-2016-04280 ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon… CVSS 3.1HIGH 7.5
See all 98 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences