[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPwPU4sQs5RfXxqLm7rstvuu-gx1oQMnXuiNyDeE_itE":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":25,"kevVulnerabilities":86,"topProductsByCves":87,"seoMetadata":90,"meta":99},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":24},22164,"ntp",2,99,0,217,"2023-04-11","n",[16,19],{"id":17,"product_name":8,"version_count":18,"cve_count":10,"kev_count":11,"last_cve_update":13},120194,216,{"id":20,"product_name":21,"version_count":22,"cve_count":11,"kev_count":11,"last_cve_update":23},120195,"ntp-dev",1,null,"Ntp is a technology vendor with 2 tracked products and 99 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[26,35,43,50,55,60,66,71,76,81],{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":34},"CVE-2013-5211","The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.","2014-01-02",5,"v2","Medium",false,0.97549,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":33,"epssScore":42},"CVE-2015-7871","Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.","2017-08-07",9.8,"v3.1","Critical",0.81762,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":31,"severity":48,"isKev":33,"epssScore":49},"CVE-2014-9295","Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure function.","2014-12-20",7.5,"High",0.79069,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":47,"cvssVersion":40,"severity":48,"isKev":33,"epssScore":54},"CVE-2016-7434","The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.","2017-01-13",0.53089,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":47,"cvssVersion":40,"severity":48,"isKev":33,"epssScore":59},"CVE-2016-4957","ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.","2016-07-05",0.44936,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":31,"severity":32,"isKev":33,"epssScore":65},"CVE-2009-3563","ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.","2009-12-09",6.4,0.32059,{"cveId":67,"description":68,"publishedDate":53,"cvssScore":47,"cvssVersion":69,"severity":48,"isKev":33,"epssScore":70},"CVE-2016-9312","ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of service via a large UDP packet.","v3.0",0.31715,{"cveId":72,"description":73,"publishedDate":38,"cvssScore":74,"cvssVersion":40,"severity":32,"isKev":33,"epssScore":75},"CVE-2015-7855","The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.",6.5,0.31068,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":47,"cvssVersion":69,"severity":48,"isKev":33,"epssScore":80},"CVE-2018-7182","The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.","2018-03-06",0.28834,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":39,"cvssVersion":69,"severity":41,"isKev":33,"epssScore":85},"CVE-2018-12327","Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whether there are any common situations in which ntpq or ntpdc is used with a command line from an untrusted source.","2018-06-20",0.28018,[],[88,89],{"id":17,"product_name":8,"version_count":18,"cve_count":10,"kev_count":11,"last_cve_update":13},{"id":20,"product_name":21,"version_count":22,"cve_count":11,"kev_count":11,"last_cve_update":23},{"title":91,"metaDescription":92,"keywords":93,"structuredData":94},"Ntp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Ntp covering 2 products with 99 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Ntp vulnerabilities, Ntp security, Ntp CVE, Ntp threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":95,"@type":96,"name":97,"description":92,"url":98},"https:\u002F\u002Fschema.org","Organization","Ntp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fntp",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":100,"apiVersion":101},"2026-10-17T13:46:15.083Z","3.0"]