Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-2518
5.3
MEDIUMCVSS v3
Published
January 30, 2017
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
ntp-project/ntp
GitHubThe full and complete NTP Reference Implementation from the Network Time Protocol Project at Network Time Foundation.
GitHubThe full and complete NTP Reference Implementation from the Network Time Protocol Project at Network Time Foundation.= 4.2.8, < 4.2.8, >= 4.3.0, < 4.3.92NVD