CVE-2014-9295 Memory corruption in n/a
Remote attackers can execute arbitrary code on NTP servers via crafted packets due to stack-based buffer overflows in ntpd.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-9295?
CVE-2014-9295 is a high-severity memory corruption vulnerability in Ntp Ntp, published on 20 Dec 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure function.
Weakness: CWE-119
Which versions are affected by CVE-2014-9295?
It affects 1 product.
Products include Ntp Ntp.
How do I fix CVE-2014-9295?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2014-9295 being exploited?
There is no known exploitation of CVE-2014-9295 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Ntp Ntp
Sources
Also known as DEBIAN-CVE-2014-9295, GHSA-67hp-c7g3-34pp, UBUNTU-CVE-2014-9295.