5.3

CVE-2016-2518: debian debian_linux Out-of-bounds Read

CVSS: 5.3v3.1MediumModified
AliasesUBUNTU-CVE-2016-2518DEBIAN-CVE-2016-2518
Published 30-01-2017Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2016-2518 is a medium (CVSS 5.3) Out-of-bounds Read vulnerability in debian debian_linux. EPSS estimates a 15.08% chance of exploitation in the next 30 days, higher than 96.7% of scored vulnerabilities.

Overall risk
24/100
0100
Low · default modelHow is this calculated?
CVSS score
5.3/10
010
Medium · v3.1 (NVD)
EPSS score
15.08%
0%100%
Medium · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 11 · Related 6
DLA-559-1DSA-3629-1MGASA-2016-0174OPENSUSE-SU-2024:10181-1RHSA-2016:1141RHSA-2016:1552

Timeline

  1. 30-01-2017
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.

CVSS metrics

5 scores · 3 sources · 3 versions

EPSS trend

Probability

15.08%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 15.08% on 18-09-2026

18-09-202618-10-2026
EPSS score
15.08%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat6 products
Netapp5 products
Debian2 products
Oracle2 products
Freebsd1 product
  • freebsdEOL9.3 | 9.3:p1 | 9.3:p10 | 9.3:p12 | 9.3:p13 | 9.3:p16 | 9.3:p19 | 9.3:p2 | 9.3:p20 | 9.3:p21 | 9.3:p22 | 9.3:p23 | 9.3:p24 | 9.3:p25 | 9.3:p28 | 9.3:p3 | 9.3:p30 | 9.3:p31 | 9.3:p32 | 9.3:p33 | 9.3:p34 | 9.3:p35 | 9.3:p36 | 9.3:p38 | 9.3:p39 | 9.3:p5 | 9.3:p6 | 9.3:p7 | 9.3:p8 | 9.3:p9 | 10.1 | 10.1:p1 | 10.1:p10 | 10.1:p12 | 10.1:p15 | 10.1:p16 | 10.1:p17 | 10.1:p18 | 10.1:p19 | 10.1:p2 | 10.1:p22 | 10.1:p24 | 10.1:p25 | 10.1:p26 | 10.1:p27 | 10.1:p28 | 10.1:p29 | 10.1:p3 | 10.1:p30 | 10.1:p31 | 10.1:p4 | 10.1:p5 | 10.1:p6 | 10.1:p7 | 10.1:p8 | 10.1:p9 | 10.2 | 10.2:p1 | 10.2:p10 | 10.2:p11 | 10.2:p12 | 10.2:p13 | 10.2:p14 | 10.2:p2 | 10.2:p5 | 10.2:p7 | 10.2:p8 | 10.2:p9 | 10.3
Ntp1 product
  • ntp< 4.2.8 | ≥ 4.3.0, < 4.3.92 | 4.2.8 | 4.2.8:p1 | 4.2.8:p1-beta1 | 4.2.8:p1-beta2 | 4.2.8:p1-beta3 | 4.2.8:p1-beta4 | 4.2.8:p1-beta5 | 4.2.8:p1-rc1 | 4.2.8:p1-rc2 | 4.2.8:p2 | 4.2.8:p2-rc1 | 4.2.8:p2-rc2 | 4.2.8:p2-rc3 | 4.2.8:p3 | 4.2.8:p3-rc1 | 4.2.8:p3-rc2 | 4.2.8:p3-rc3 | 4.2.8:p4 | 4.2.8:p5 | 4.2.8:p6 | 4.2.8:p7 | 4.2.8:p8
Ubuntu1 product
  • ntp< 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 | < 1:4.2.8p4+dfsg-3ubuntu5.3

7 vendors · 18 products

References

38 links
Show all 38 references