CVE-2014-9751

Home/CVE/The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly deter

CVE

The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly deter

The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a source IP address is an IPv6 loopback address, which makes it easier for remote attackers to spoof restricted packets, and read or write to the runtime state, by leveraging the ability to reach the ntpd machine's network interface with a packet from the ::1 address.

MEDIUM · CVSS 6.8 EPSS 0.04839

Monitor

No active-exploitation, high-EPSS, or public-exploit signals - routine patching cadence

Sigma rules16 YARA rules0

⬡

Weakness Classification

CWE-20Improper Input Validation

▤

Affected Products & Versions

ntp>= 4.2.0 and < 4.2.8
ntpall versions
redhat enterprise linux desktopall versions
redhat enterprise linux serverall versions
redhat enterprise linux workstationall versions
debian linuxall versions
oracle linuxall versions

◈

Sigma Hunt Rules

Exact rules name this CVE ID. Product rules name an affected product in their title. Related rules cover techniques used by actors who exploited this CVE. Showing the most relevant matches; the complete related set is on the full drill-down.

producthighSuspicious Microsoft Office Child Process - MacOS

producthighRemote Access Tool - Renamed MeshAgent Execution - MacOS

producthighBinary Padding - MacOS

productmediumSuspicious Execution via macOS Script Editor

productmediumSystem Information Discovery Via Sysctl - MacOS

productmediumNew File Exclusion Added To Time Machine Via Tmutil - MacOS

Show all 16 top matchesproductmediumSuspicious MacOS Firmware Activity
productmediumDisk Image Mounting Via Hdiutil - MacOS
productcriticalLinux Reverse Shell Indicator
producthighCommunication To LocaltoNet Tunneling Service Initiated - Linux
producthighPotentially Suspicious Malware Callback Communication - Linux
producthighLinux Crypto Mining Pool Connections
producthighCommunication To Ngrok Tunneling Service - Linux
producthighLinux Crypto Mining Indicators
producthighShell Execution GCC  - Linux
producthighShell Execution via Rsync - Linux

▣

Scoring & Timeline

6.8

MEDIUM · CVSS v2 (legacy) · cve@mitre.org

View on NVD

This CVE predates CVSS v3; the legacy v2 score is shown so triage still has a severity to work with.

v2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Published to NVD06 Oct 2015 · 01:59 AM

⚑

Vendor Advisories

suse-csafopenSUSE-SU-2024:10181-1
rhsaRHSA-2015:1459Low
rhsaRHSA-2015:2231Low
suse-csafSUSE-SU-2015:0274-1
suse-csafSUSE-SU-2015:0259-1
Show all 8 vendor advisoriessuse-csafSUSE-SU-2015:1173-1
suse-csafSUSE-SU-2015:0259-3
suse-csafSUSE-SU-2015:0259-2

🔗

References & Sources

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

http://bugs.ntp.org/show_bug.cgi?id=2672Issue TrackingPatchVendor Advisory

http://rhn.redhat.com/errata/RHSA-2015-1459.htmlThird Party Advisory

http://support.ntp.org/bin/view/Main/SecurityNotice#December_2014_NTP_Security_VulneVendor Advisory

http://www.debian.org/security/2015/dsa-3388Third Party Advisory

http://www.kb.cert.org/vuls/id/852879Third Party AdvisoryUS Government Resource

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlThird Party Advisory

Show all 9 references

http://www.securityfocus.com/bid/72584Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1184572Issue TrackingThird Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03886en_usThird Party Advisory

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin