VDB
DEBIAN-CVE-2016-9042
DEBIAN-CVE-2016-9042
PUBLISHED
CVSS 5.900000095367432 MEDIUM
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | ntp | 0, 0, 0 |
Timeline
- Jun 4, 2018 CVE Published
- Apr 28, 2026 CVE Updated