CVE-2016-9042

An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9

Low · published June 4, 2018

CVSS v3.0
3.7
EPSS
4%
Percentile
90.2
In the wild
Unconfirmed
What it is

An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.

The record
Technical detail
CVSS v3.0
3.7 · LOW
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.03910 · 90.2th percentile
Published
2018-06-04T20:00Z
EPSS history
Timeline
  • 04 JUN 20:00Z
    An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9
    cvelistv5