CVE-2016-9311: ntp NULL Pointer Dereference

EPSS trend

Probability

11.09%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

-0.09 pp

From 11.17% on 19-09-2026

19-09-202619-10-2026

EPSS score

11.09%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

19 links

h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_usX Refsource CONFIRM
www.securityfocus.com/bid/94444VDB EntryX Refsource BIDThird Party Advisory
usn.ubuntu.com/3707-2/Vendor AdvisoryX Refsource UBUNTU
rhn.redhat.com/errata/RHSA-2017-0252.htmlVendor AdvisoryX Refsource REDHAT
support.ntp.org/bin/view/Main/SecurityNoticeX Refsource CONFIRMVendor Advisory
nwtime.org/ntp428p9_release/X Refsource CONFIRMRelease NotesVendor Advisory
www.kb.cert.org/vuls/id/633847Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.securitytracker.com/id/1037354VDB EntryX Refsource SECTRACK
bto.bluecoat.com/security-advisory/sa139X Refsource CONFIRM
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03799en_usX Refsource CONFIRM

Show all 19 references

security.freebsd.org/advisories/FreeBSD-SA-16:39.ntp.ascVendor AdvisoryX Refsource FREEBSD
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03885en_usX Refsource CONFIRM
support.ntp.org/bin/view/Main/NtpBug3119X Refsource CONFIRMIssue TrackingMitigationVendor Advisory
ubuntu.com/security/CVE-2016-9311REPORT
www.talosintelligence.com/reports/TALOS-2016-0204/REPORT
ubuntu.com/security/notices/USN-3349-1Advisory
ubuntu.com/security/notices/USN-3707-2Advisory
www.cve.org/CVERecord?id=CVE-2016-9311REPORT
security-tracker.debian.org/tracker/CVE-2016-9311Advisory

Related vulnerabilities

CVE-2013-5211debianntp+497.55%12y ago02-01-2014 11:00The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.CVE-2014-5209debianntp+262.50%6y ago08-01-2020 00:29An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.CVE-2009-1252debianntp+121.29%17y ago19-05-2009 19:00Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.CVE-2009-0159debianntp+113.23%17y ago14-04-2009 15:00Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.CVE-2009-0021debianntp+33.22%17y ago07-01-2009 17:00NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.CVE-2009-3563debianntp+332.06%16y ago09-12-2009 00:00ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.

All vulnerabilities inntp

CVE-2016-9311: ntp NULL Pointer Dereference

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References