CVE-2016-9312

High

Published: 13/01/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In ntpd versions before 4.2.8p9, when running on Windows, there is a vulnerability that allows remote attackers to cause a denial of service by sending a large UDP packet.

Risk Assessment

Attackers can exploit this vulnerability to disrupt the operation of the NTP server, potentially leading to time synchronization issues within the organization.

Recommendation

It is recommended to upgrade ntpd to version 4.2.8p9 or later to mitigate this vulnerability.

Other vulnerabilities in ntpd

CVE-2023-4012High
CVE-2023-4012 affects ntpd, which crashes when the server is not NTS-enabled (no certificate) and receives a request from an NTS-enabled client (mode 3).

Original NVD description (English source)

ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of service via a large UDP packet.