CVE-2013-5211: ntp Improper Input Validation

CVSS: 5.0v2.0MediumModified

AliasesMGASA-2014-0032DEBIAN-CVE-2013-5211

Published 02-01-2014Last modified 06-08-2024

Vulnerability summary

CVE-2013-5211 is a medium (CVSS 5.0) Improper Input Validation vulnerability in ntp. EPSS estimates a 97.55% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 11 public exploits are recorded.

Overall risk

50/100

0100

High · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

97.55%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits11exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

OPENSUSE-SU-2024:10181-1

Timeline

02-01-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

97.55%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 97.55% on 18-09-2026

18-09-202618-10-2026

EPSS score

97.55%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

11 found

exploit-databasedoslinuxUnverified
NTP ntpd monlist Query Reflection - Denial of Service
Maturity: poc
MetasploitremoteUnverified
NTP Monitor List Scanner
auxiliary/scanner/ntp/ntp_monlist
Maturity: poc
MetasploitremoteUnverified
NTP Mode 7 PEER_LIST DoS Scanner
auxiliary/scanner/ntp/ntp_peer_list_dos
Maturity: poc

Show all 11 exploits

MetasploitremoteUnverified
NTP Mode 7 PEER_LIST_SUM DoS Scanner
auxiliary/scanner/ntp/ntp_peer_list_sum_dos
Maturity: poc
MetasploitremoteUnverified
NTP Clock Variables Disclosure
auxiliary/scanner/ntp/ntp_readvar
Maturity: poc
MetasploitremoteUnverified
NTP Mode 6 REQ_NONCE DRDoS Scanner
auxiliary/scanner/ntp/ntp_req_nonce_dos
Maturity: poc
MetasploitremoteUnverified
NTP Mode 7 GET_RESTRICT DRDoS Scanner
auxiliary/scanner/ntp/ntp_reslist_dos
Maturity: poc
MetasploitremoteUnverified
NTP Mode 6 UNSETTRAP DRDoS Scanner
auxiliary/scanner/ntp/ntp_unsettrap_dos
Maturity: poc
MetasploitremoteUnverified
Portmapper Amplification Scanner
auxiliary/scanner/portmap/portmap_amp
Maturity: poc
MetasploitremoteUnverified
UDP Amplification Scanner
auxiliary/scanner/udp/udp_amplification
Maturity: poc
MetasploitremoteUnverified
SSDP ssdp:all M-SEARCH Amplification Scanner
auxiliary/scanner/upnp/ssdp_amp
Maturity: poc

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Debian1 product

ntp< 1:4.2.8p3+dfsg-1

Mageia1 product

ntp< 4.2.6p5-12.1.mga3

Ntp1 product

ntp< 4.2.7 | 4.2.7 | 4.2.7:p0 | 4.2.7:p1 | 4.2.7:p10 | 4.2.7:p11 | 4.2.7:p12 | 4.2.7:p13 | 4.2.7:p14 | 4.2.7:p15 | 4.2.7:p16 | 4.2.7:p17 | 4.2.7:p18 | 4.2.7:p19 | 4.2.7:p2 | 4.2.7:p20 | 4.2.7:p21 | 4.2.7:p22 | 4.2.7:p23 | 4.2.7:p24 | 4.2.7:p25 | 4.2.7:p3 | 4.2.7:p4 | 4.2.7:p5 | 4.2.7:p6 | 4.2.7:p7 | 4.2.7:p8 | 4.2.7:p9

Opensuse1 product

opensuseEOL11.4

Oracle1 product

linuxEOL6 | 7

5 vendors · 5 products

References

26 links

secunia.com/advisories/59288Third Party AdvisoryX Refsource SECUNIANot Applicable
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04790232X Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-updates/2014-09/msg00031.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlX Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=138971294629419&w=2Vendor AdvisoryX Refsource HPMailing List
www.us-cert.gov/ncas/alerts/TA14-013AThird Party AdvisoryX Refsource CERTUS Government Resource
www.securityfocus.com/bid/64692VDB EntryX Refsource BIDBroken LinkThird Party Advisory
www.kb.cert.org/vuls/id/348126Third Party AdvisoryX Refsource CERT VNUS Government ResourceWEB
marc.info?l=bugtraq&m=144182594518755&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
openwall.com/lists/oss-security/2013/12/30/6Mailing ListX Refsource MLIST

Show all 26 references

secunia.com/advisories/59726Third Party AdvisoryX Refsource SECUNIANot Applicable
www.securitytracker.com/id/1030433VDB EntryX Refsource SECTRACKThird Party Advisory
www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-dev/ntp-dev-4.2.7p26.tar.gzX Refsource CONFIRMPatch
ics-cert.us-cert.gov/advisories/ICSA-14-051-04X Refsource MISCThird Party AdvisoryUS Government Resource
aix.software.ibm.com/aix/efixes/security/ntp_advisory.ascX Refsource CONFIRMThird Party Advisory
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095861X Refsource CONFIRMBroken Link
lists.ntp.org/pipermail/pool/2011-December/005616.htmlMailing ListX Refsource MLISTBroken Link
openwall.com/lists/oss-security/2013/12/30/7Mailing ListX Refsource MLIST
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095892X Refsource CONFIRMBroken Link
bugs.ntp.org/show_bug.cgi?id=1532X Refsource CONFIRMIssue Tracking
puppet.com/security/cve/puppetlabs-ntp-nov-2015-advisoryX Refsource CONFIRMBroken Link
advisories.mageia.org/MGASA-2014-0032.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=12326REPORT
support.ntp.org/bin/view/Main/SecurityNoticeWEB
lists.opensuse.org/opensuse-security-announce/2014-01/msg00005.htmlWEB
security-tracker.debian.org/tracker/CVE-2013-5211Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities