Read the docs
TI-2020-10805 Aliases CVE-2020-13817GHSA-fx6x-7xgx-2wwp

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a…

Priority LOW 38CWE-330Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · High · High
Fix status
Partial Red Hat: 8 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.03362 88th percentileScored 2026-11-07
Fix Partial Red Hat: 1 advisoryRed Hat: 8 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 73

CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*before 4.2.8; 4.3.0 to before 4.3.100VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*4.2.8VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*4.2.8 p1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*4.2.8 p1-beta1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*4.2.8 p1-beta2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*4.2.8 p1-beta3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*4.2.8 p1-beta4VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*4.2.8 p1-beta5VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*4.2.8 p1-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*4.2.8 p1-rc2VulnerableNTP Project
  • cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:* Versions before 4.2.8; 4.3.0 to before 4.3.100 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:* Versions 4.2.8 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:* Versions 4.2.8 p1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:* Versions 4.2.8 p1-beta1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:* Versions 4.2.8 p1-beta2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:* Versions 4.2.8 p1-beta3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:* Versions 4.2.8 p1-beta4 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:* Versions 4.2.8 p1-beta5 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:* Versions 4.2.8 p1-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:* Versions 4.2.8 p1-rc2 Vulnerable ·NTP Project
Show 63 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:4.2.8:p10:*:*:*:*:*:*4.2.8 p10VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p11:*:*:*:*:*:*4.2.8 p11VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p12:*:*:*:*:*:*4.2.8 p12VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p13:*:*:*:*:*:*4.2.8 p13VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*4.2.8 p2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*4.2.8 p2-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*4.2.8 p2-rc2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*4.2.8 p2-rc3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*4.2.8 p3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*4.2.8 p3-rc1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*4.2.8 p3-rc2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*4.2.8 p3-rc3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*4.2.8 p4VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*4.2.8 p5VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:*4.2.8 p6VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*4.2.8 p7VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:*4.2.8 p8VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*4.2.8 p9VulnerableNTP Project
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:data_ontap:-:*:*:*:*:7-mode:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:ontap_tools:-:*:*:*:*:vmware_vsphere:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*15.1VulnerableopenSUSE
cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*15.2VulnerableopenSUSE
cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*before xcp2410VulnerableFujitsu
cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*not specified by NVDRunning onFujitsu
cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*before xcp2410VulnerableFujitsu
cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*not specified by NVDRunning onFujitsu
cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*before xcp2410VulnerableFujitsu
cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*not specified by NVDRunning onFujitsu
cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*before xcp2410VulnerableFujitsu
cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*not specified by NVDRunning onFujitsu
cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*before xcp2410VulnerableFujitsu
cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*not specified by NVDRunning onFujitsu
cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*before xcp2410VulnerableFujitsu
cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*not specified by NVDRunning onFujitsu
cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*before xcp3110VulnerableFujitsu
cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*before xcp3110VulnerableFujitsu
cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*before xcp3110VulnerableFujitsu
cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*before xcp3110VulnerableFujitsu
cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*before xcp3110VulnerableFujitsu
  • cpe:2.3:a:ntp:ntp:4.2.8:p10:*:*:*:*:*:* Versions 4.2.8 p10 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p11:*:*:*:*:*:* Versions 4.2.8 p11 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p12:*:*:*:*:*:* Versions 4.2.8 p12 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p13:*:*:*:*:*:* Versions 4.2.8 p13 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:* Versions 4.2.8 p2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:* Versions 4.2.8 p2-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:* Versions 4.2.8 p2-rc2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:* Versions 4.2.8 p2-rc3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:* Versions 4.2.8 p3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:* Versions 4.2.8 p3-rc1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:* Versions 4.2.8 p3-rc2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:* Versions 4.2.8 p3-rc3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:* Versions 4.2.8 p4 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:* Versions 4.2.8 p5 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:* Versions 4.2.8 p6 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:* Versions 4.2.8 p7 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:* Versions 4.2.8 p8 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:* Versions 4.2.8 p9 Vulnerable ·NTP Project
  • cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:data_ontap:-:*:*:*:*:7-mode:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:ontap_tools:-:*:*:*:*:vmware_vsphere:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE
  • cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:* Versions 15.2 Vulnerable ·openSUSE
  • cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:* Versions before xcp2410 Vulnerable ·Fujitsu
  • cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
  • cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:* Versions before xcp2410 Vulnerable ·Fujitsu
  • cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
  • cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:* Versions before xcp2410 Vulnerable ·Fujitsu
  • cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
  • cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:* Versions before xcp2410 Vulnerable ·Fujitsu
  • cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
  • cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:* Versions before xcp2410 Vulnerable ·Fujitsu
  • cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
  • cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:* Versions before xcp2410 Vulnerable ·Fujitsu
  • cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu
  • cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:* Versions before xcp3110 Vulnerable ·Fujitsu
  • cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:* Versions before xcp3110 Vulnerable ·Fujitsu
  • cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:* Versions before xcp3110 Vulnerable ·Fujitsu
  • cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:* Versions before xcp3110 Vulnerable ·Fujitsu
  • cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:* Versions before xcp3110 Vulnerable ·Fujitsu

Remediation

Red Hat 1 advisory

  • RHSA-2020:2663 Released 2020-06-23 · Red Hat rating Moderate
    ntp security update
    • Red Hat Enterprise Linux Client (v. 7) ntp-4.2.6p5-29.el7_8.2, ntpdate-4.2.6p5-29.el7_8.2
    • Red Hat Enterprise Linux Client Optional (v. 7) ntp-doc-4.2.6p5-29.el7_8.2, ntp-perl-4.2.6p5-29.el7_8.2, sntp-4.2.6p5-29.el7_8.2
    • Red Hat Enterprise Linux ComputeNode (v. 7) ntp-4.2.6p5-29.el7_8.2, ntpdate-4.2.6p5-29.el7_8.2
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) ntp-doc-4.2.6p5-29.el7_8.2, ntp-perl-4.2.6p5-29.el7_8.2, sntp-4.2.6p5-29.el7_8.2
    • Red Hat Enterprise Linux Server (v. 7) ntp-4.2.6p5-29.el7_8.2, ntpdate-4.2.6p5-29.el7_8.2
    • Red Hat Enterprise Linux Server Optional (v. 7) ntp-doc-4.2.6p5-29.el7_8.2, ntp-perl-4.2.6p5-29.el7_8.2, sntp-4.2.6p5-29.el7_8.2
    • Red Hat Enterprise Linux Workstation (v. 7) ntp-4.2.6p5-29.el7_8.2, ntpdate-4.2.6p5-29.el7_8.2
    • Red Hat Enterprise Linux Workstation Optional (v. 7) ntp-doc-4.2.6p5-29.el7_8.2, ntp-perl-4.2.6p5-29.el7_8.2, sntp-4.2.6p5-29.el7_8.2

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2020:2663
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2020:2663
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2020:2663
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2020:2663
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2020:2663
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2020:2663
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2020:2663
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2020:2663

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-13817
  2. 2026-10-03 Alias added: GHSA-fx6x-7xgx-2wwp

References

Patch 1

Advisory 6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences