https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:48:33.225238+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2015-avi-148 certfr-2015-avi-148 — De multiples vulnérabilités ont été corrigées dans les produits <span class="textit">Cisco</span>. Elles permettent à u… 2026-10-02T19:48:33.236619+00:00 certfr-2015-avi-148 https://cve.radiocsirt.org/vuln/cnvd-2015-02278 cnvd-2015-02278 2026-10-02T19:48:33.236663+00:00 cnvd-2015-02278 https://cve.radiocsirt.org/vuln/euvd-2026-90524 EUVD-2026-90524 2026-10-02T19:48:33.236678+00:00 EUVD-2026-90524 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1799 fkie_cve-2015-1799 2026-10-02T19:48:33.236689+00:00

The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service (synchronization loss) by spoofing the source IP address of a peer.

 https://cve.radiocsirt.org/vuln/ghsa-q9p8-4cvj-q5fj GHSA-q9p8-4cvj-q5fj 2026-10-02T19:48:33.236716+00:00

The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service (synchronization loss) by spoofing the source IP address of a peer.

 https://cve.radiocsirt.org/vuln/gsd-2015-1799 gsd-2015-1799 2026-10-02T19:48:33.236732+00:00 gsd-2015-1799 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10181-1 openSUSE-SU-2024:10181-1 — ntp-4.2.8p9-1.1 on GA media 2026-10-02T19:48:33.236742+00:00

ntp-4.2.8p9-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2015:1459 RHSA-2015:1459 — Red Hat Security Advisory: ntp security, bug fix, and enhancement update 2026-10-02T19:48:33.236786+00:00

ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: ntpd accepts unauthenticated packets with symmetric key crypto ntp: authentication doesn't protect symmetric associations against DoS attacks ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems

 https://cve.radiocsirt.org/vuln/suse-su-2015:0259-1 SUSE-SU-2015:0259-1 — Recommended update for ntp 2026-10-02T19:48:33.236810+00:00

Recommended update for ntp

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1799 UBUNTU-CVE-2015-1799 2026-10-02T19:48:33.236826+00:00

Affected: Ubuntu:14.04:LTS: ntp

The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service (synchronization loss) by spoofing the source IP address of a peer.