CVE-2009-3563

ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that triggers a continuous exchange of MODE_PRIVATE error responses between two NTP daemons.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
VendorProductVersion
ntpntp
𝑥
≤ 4.2.2p4
ntpntp
4.0.72
ntpntp
4.0.73
ntpntp
4.0.90
ntpntp
4.0.91
ntpntp
4.0.92
ntpntp
4.0.93
ntpntp
4.0.94
ntpntp
4.0.95
ntpntp
4.0.96
ntpntp
4.0.97
ntpntp
4.0.98
ntpntp
4.0.99
ntpntp
4.1.0
ntpntp
4.1.2
ntpntp
4.2.0
ntpntp
4.2.2
ntpntp
4.2.2p1:p1
ntpntp
4.2.2p2:p2
ntpntp
4.2.2p3:p3
ntpntp
4.2.5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ntp
bullseye
1:4.2.8p15+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ntp
karmic
Fixed 1:4.2.4p6+dfsg-1ubuntu5.1
released
jaunty
Fixed 1:4.2.4p4+dfsg-7ubuntu5.2
released
intrepid
Fixed 1:4.2.4p4+dfsg-6ubuntu2.4
released
hardy
Fixed 1:4.2.4p4+dfsg-3ubuntu2.3
released
dapper
Fixed 1:4.2.0a+stable-8.1ubuntu6.3
released
References
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2010-005.txt.asc
http://aix.software.ibm.com/aix/efixes/security/xntpd_advisory.asc
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560074
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691
http://lists.vmware.com/pipermail/security-announce/2010/000082.html
http://marc.info/?l=bugtraq&m=130168580504508&w=2
http://marc.info/?l=bugtraq&m=136482797910018&w=2
http://secunia.com/advisories/37629
http://secunia.com/advisories/37922
http://secunia.com/advisories/38764
http://secunia.com/advisories/38794
http://secunia.com/advisories/38832
http://secunia.com/advisories/38834
http://secunia.com/advisories/39593
http://security-tracker.debian.org/tracker/CVE-2009-3563
http://securitytracker.com/id?1023298
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021781.1-1
http://support.avaya.com/css/P8/documents/100071808
http://support.ntp.org/bin/view/Main/SecurityNotice#DoS_attack_from_certain_NTP_mode
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ68659
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ71047
http://www.debian.org/security/2009/dsa-1948
http://www.kb.cert.org/vuls/id/568372
http://www.kb.cert.org/vuls/id/MAPG-7X7V6J
http://www.kb.cert.org/vuls/id/MAPG-7X7VD7
http://www.securityfocus.com/bid/37255
http://www.vupen.com/english/advisories/2010/0510
http://www.vupen.com/english/advisories/2010/0528
http://www.vupen.com/english/advisories/2010/0993
https://bugzilla.redhat.com/show_bug.cgi?id=531213
https://lists.ntp.org/pipermail/announce/2009-December/000086.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11225
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12141
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19376
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7076
https://rhn.redhat.com/errata/RHSA-2009-1648.html
https://rhn.redhat.com/errata/RHSA-2009-1651.html
https://rhn.redhat.com/errata/RHSA-2010-0095.html
https://support.ntp.org/bugs/show_bug.cgi?id=1331
https://www.kb.cert.org/vuls/id/417980
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00763.html
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00809.html
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2010-005.txt.asc
http://aix.software.ibm.com/aix/efixes/security/xntpd_advisory.asc
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560074
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691
http://lists.vmware.com/pipermail/security-announce/2010/000082.html
http://marc.info/?l=bugtraq&m=130168580504508&w=2
http://marc.info/?l=bugtraq&m=136482797910018&w=2
http://secunia.com/advisories/37629
http://secunia.com/advisories/37922
http://secunia.com/advisories/38764
http://secunia.com/advisories/38794
http://secunia.com/advisories/38832
http://secunia.com/advisories/38834
http://secunia.com/advisories/39593
http://security-tracker.debian.org/tracker/CVE-2009-3563
http://securitytracker.com/id?1023298
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021781.1-1
http://support.avaya.com/css/P8/documents/100071808
http://support.ntp.org/bin/view/Main/SecurityNotice#DoS_attack_from_certain_NTP_mode
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ68659
http://www-01.ibm.com/support/docview.wss?uid=isg1IZ71047
http://www.debian.org/security/2009/dsa-1948
http://www.kb.cert.org/vuls/id/568372
http://www.kb.cert.org/vuls/id/MAPG-7X7V6J
http://www.kb.cert.org/vuls/id/MAPG-7X7VD7
http://www.securityfocus.com/bid/37255
http://www.vupen.com/english/advisories/2010/0510
http://www.vupen.com/english/advisories/2010/0528
http://www.vupen.com/english/advisories/2010/0993
https://bugzilla.redhat.com/show_bug.cgi?id=531213
https://lists.ntp.org/pipermail/announce/2009-December/000086.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11225
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12141
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19376
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7076
https://rhn.redhat.com/errata/RHSA-2009-1648.html
https://rhn.redhat.com/errata/RHSA-2009-1651.html
https://rhn.redhat.com/errata/RHSA-2010-0095.html
https://support.ntp.org/bugs/show_bug.cgi?id=1331
https://www.kb.cert.org/vuls/id/417980
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00763.html
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00809.html