https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:24:47 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-06475 cnvd-2015-06475 https://cve.radiocsirt.org/vuln/cnvd-2015-06475 https://cve.radiocsirt.org/vuln/euvd-2026-104170 EUVD-2026-104170 https://cve.radiocsirt.org/vuln/euvd-2026-104170 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9751 <p>The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a source IP address is an IPv6 loopback address, which makes it easier for remote attackers to spoof restricted packets, and read or write to the runtime state, by leveraging the ability to reach the ntpd machine&#39;s network interface with a packet from the ::1 address.</p> <p>The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a source IP address is an IPv6 loopback address, which makes it easier for remote attackers to spoof restricted packets, and read or write to the runtime state, by leveraging the ability to reach the ntpd machine&#39;s network interface with a packet from the ::1 address.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-9751 https://cve.radiocsirt.org/vuln/ghsa-ffj6-rf7h-c479 <p>The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a source IP address is an IPv6 loopback address, which makes it easier for remote attackers to spoof restricted packets, and read or write to the runtime state, by leveraging the ability to reach the ntpd machine&#39;s network interface with a packet from the ::1 address.</p> <p>The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a source IP address is an IPv6 loopback address, which makes it easier for remote attackers to spoof restricted packets, and read or write to the runtime state, by leveraging the ability to reach the ntpd machine&#39;s network interface with a packet from the ::1 address.</p> https://cve.radiocsirt.org/vuln/ghsa-ffj6-rf7h-c479 https://cve.radiocsirt.org/vuln/gsd-2014-9751 gsd-2014-9751 https://cve.radiocsirt.org/vuln/gsd-2014-9751 https://cve.radiocsirt.org/vuln/rhsa-2015:1459 <p>ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: ntpd accepts unauthenticated packets with symmetric key crypto ntp: authentication doesn&#39;t protect symmetric associations against DoS attacks ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems</p> <p>ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: ntpd accepts unauthenticated packets with symmetric key crypto ntp: authentication doesn&#39;t protect symmetric associations against DoS attacks ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1459 https://cve.radiocsirt.org/vuln/rhsa-2015:2231 <p>ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: ntpd accepts unauthenticated packets with symmetric key crypto ntp: authentication doesn&#39;t protect symmetric associations against DoS attacks ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems</p> <p>ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: vallen in extension fields are not validated ntp: drop packets with source address ::1 ntp: ntpd accepts unauthenticated packets with symmetric key crypto ntp: authentication doesn&#39;t protect symmetric associations against DoS attacks ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems</p> https://cve.radiocsirt.org/vuln/rhsa-2015:2231