CVE-2016-2518

Fixed in a distro release EPSS 15%

The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.

Published 2017-01-30 · CVE record · OSV

Products: ntp, debian_linux, netapp clustered_data_ontap, netapp data_ontap, netapp oncommand_balance, netapp oncommand_performance_manager, netapp oncommand_unified_manager_for_clustered_data_ontap, oracle communications_user_data_repository, oracle linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, freebsd, siemens simatic_net_cp_443-1_opc_ua_firmware

Distro releases