ALPINE-CVE-2016-6301 — Vulnetix

Try Vulnetix Request Demo

ALPINE-CVE-2016-6301 PUBLISHED CVSS 7.5 HIGH

The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop.

Risk Scores

CVSS v3.0

7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Alpine:v3.3	busybox	1.22.1-r8, 0, 1.12.1-r1
Alpine:v3.5	busybox	1.14.2-r1, 1.16.0-r3, 1.16.1-r0
Alpine:v3.4	busybox	1.21.1-r3, 0, 1.12.1-r1
Alpine:v3.2	busybox	0, 1.23.2-r3, 1.23.2-r2

Timeline

Dec 9, 2016 CVE Published
Nov 19, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2016-6301 advisory

Open in Interactive Console →