CVEvulnerability

CVE-2009-1252

6.8 MEDIUM Published 2009-05-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-05-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.

Affected configurations

• ntp ntp 4.2.4p0 • ntp ntp 4.2.4p1 • ntp ntp 4.2.4p2 • ntp ntp 4.2.4p3 • ntp ntp 4.2.4p4 • ntp ntp 4.2.4p5 • ntp ntp 4.2.4p6 • ntp ntp 4.2.5p0 • ntp ntp 4.2.5p1 • ntp ntp 4.2.5p2 • ntp ntp 4.2.5p3 • ntp ntp 4.2.5p4 • ntp ntp 4.2.5p5 • ntp ntp 4.2.5p6 • ntp ntp 4.2.5p7 • ntp ntp 4.2.5p8 • ntp ntp 4.2.5p9 • ntp ntp 4.2.5p10 • ntp ntp 4.2.5p11 • ntp ntp 4.2.5p12 • ntp ntp 4.2.5p13 • ntp ntp 4.2.5p14 • ntp ntp 4.2.5p15 • ntp ntp 4.2.5p16 • ntp ntp 4.2.5p17 • ntp ntp 4.2.5p18 • ntp ntp 4.2.5p19 • ntp ntp 4.2.5p20 • ntp ntp 4.2.5p21 • ntp ntp 4.2.5p23 • ntp ntp 4.2.5p24 • ntp ntp 4.2.5p25 • ntp ntp 4.2.5p26 • ntp ntp 4.2.5p27 • ntp ntp 4.2.5p28 • ntp ntp 4.2.5p29 • ntp ntp 4.2.5p30 • ntp ntp 4.2.5p31 • ntp ntp 4.2.5p32 • ntp ntp 4.2.5p33 • ntp ntp 4.2.5p35 • ntp ntp 4.2.5p36 • ntp ntp 4.2.5p37 • ntp ntp 4.2.5p38 • ntp ntp 4.2.5p39 • ntp ntp 4.2.5p40 • ntp ntp 4.2.5p41 • ntp ntp 4.2.5p42 • ntp ntp 4.2.5p43 • ntp ntp 4.2.5p44 • ntp ntp 4.2.5p45 • ntp ntp 4.2.5p46 • ntp ntp 4.2.5p47 • ntp ntp 4.2.5p48 • ntp ntp 4.2.5p49 • ntp ntp 4.2.5p50 • ntp ntp 4.2.5p51 • ntp ntp 4.2.5p52 • ntp ntp 4.2.5p53 • ntp ntp 4.2.5p54 … and 18 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References