CVE-2014-9296

The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote…

published December 20, 2014

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote attackers to trigger an unintended association change via crafted packets.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16161 · 96.9th percentile
Published
2014-12-20T02:00Z
EPSS history
Timeline
  • 20 DEC 02:00Z
    The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote…
    cvelistv5