Medium severity · published Jun 4, 2018
CVE-2016-9042
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9
5.9
CVSS
3.9%
EPSS
No
On KEV
Description
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freebsd · Freebsd
10.0; 11.0 · source: NVD
HP
Hpux-ntp · Hpe
before c.4.2.8.4.0 · source: NVD
NT
Ntp · Ntp
4.2.8 · source: NVD
SN
Simatic Net CP 443-1 Opc UA Firmware · Siemens
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-9042
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-9042
packetstormsecurity.com
http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html
packetstormsecurity.com
http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html
seclists.org
http://seclists.org/fulldisclosure/2017/Nov/7
seclists.org
http://seclists.org/fulldisclosure/2017/Sep/62
www.securityfocus.com
http://www.securityfocus.com/archive/1/540403/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded
More from Freebsd
10.0
CVE-2024-43102
umtx Kernel panic or Use-After-Free
10.0
CVE-2018-17160
In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, insufficient bounds checking in one of the device models provided by bhyve can permit a guest operating system to…
9.8
CVE-2026-101306
Multiple jail filesystem root escapes
9.8
CVE-2026-58082
Stack based buffer overflow in iconv(3)
9.8
CVE-2026-58081
Heap based buffer overflow in iconv(3)