CVE-2014-9293

The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote…

published December 20, 2014

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12978 · 96.3th percentile
Published
2014-12-20T02:00Z
EPSS history
Timeline
  • 20 DEC 02:00Z
    The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote…
    cvelistv5