CVE-2016-7431: ntp Improper Input Validation

EPSS trend

Probability

8.88%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

+0.16 pp

From 8.71% on 18-09-2026

18-09-202618-10-2026

EPSS score

8.88%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

29 links

h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_usX Refsource CONFIRM
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_usX Refsource CONFIRM
www.securityfocus.com/bid/94454VDB EntryX Refsource BID
support.ntp.org/bin/view/Main/SecurityNoticeX Refsource CONFIRMVendor Advisory
nwtime.org/ntp428p9_release/X Refsource CONFIRMRelease NotesVendor Advisory
www.kb.cert.org/vuls/id/633847Third Party AdvisoryX Refsource CERT VNUS Government Resource
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03899en_usX Refsource CONFIRM
www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlX Refsource CONFIRM
www.securitytracker.com/id/1037354VDB EntryX Refsource SECTRACK
bto.bluecoat.com/security-advisory/sa139X Refsource CONFIRM

Show all 29 references

security.freebsd.org/advisories/FreeBSD-SA-16:39.ntp.ascVendor AdvisoryX Refsource FREEBSD
support.ntp.org/bin/view/Main/NtpBug3102X Refsource CONFIRMIssue TrackingMitigationVendor Advisory
www.securityfocus.com/archive/1/540254/100/0/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/archive/1/540254/100/0/threadedMailing ListX Refsource BUGTRAQ
lists.opensuse.org/opensuse-updates/2016-12/msg00153.htmlVendor AdvisoryX Refsource SUSE
support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03899en_usX Refsource CONFIRM
www.ubuntu.com/usn/USN-3349-1Vendor AdvisoryX Refsource UBUNTU
support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03883en_usX Refsource CONFIRM
www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-ntpd-enX Refsource CONFIRM
www.broadcom.com/support/…X Refsource CONFIRM
www.securityfocus.com/archive/1/539955/100/0/threadedMailing ListX Refsource BUGTRAQ
packetstormsecurity.com/files/140240/FreeBSD-Security-Advisory-FreeBSD-SA-16.39.ntp.htmlX Refsource MISC
www.securityfocus.com/archive/1/archive/1/539955/100/0/threadedMailing ListX Refsource BUGTRAQ
cert-portal.siemens.com/productcert/pdf/ssa-211752.pdfX Refsource CONFIRM
us-cert.cisa.gov/ics/advisories/icsa-21-159-11X Refsource MISC
ubuntu.com/security/CVE-2016-7431REPORT
ubuntu.com/security/notices/USN-3349-1Advisory
www.cve.org/CVERecord?id=CVE-2016-7431REPORT
security-tracker.debian.org/tracker/CVE-2016-7431Advisory

Related vulnerabilities

CVE-2013-5211debianntp+497.55%12y ago02-01-2014 11:00The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.CVE-2014-5209debianntp+262.50%6y ago08-01-2020 00:29An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.CVE-2009-1252debianntp+121.29%17y ago19-05-2009 19:00Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.CVE-2009-0159debianntp+113.23%17y ago14-04-2009 15:00Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.CVE-2009-0021debianntp+33.22%17y ago07-01-2009 17:00NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.CVE-2009-3563debianntp+332.06%16y ago09-12-2009 00:00ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.

All vulnerabilities inntp

CVE-2016-7431: ntp Improper Input Validation

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References