CVE-2016-9311 Null dereference in n/a

What is CVE-2016-9311?

CVE-2016-9311 is a medium-severity vulnerability in Ntp Ntp, published on 13 Jan 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted packet.

Weakness: CWE-476

Which versions are affected by CVE-2016-9311?

It affects 1 product.

Products include Ntp Ntp.

How do I fix CVE-2016-9311?

Upgrade to a fixed version.

Is CVE-2016-9311 being exploited?

There is no known exploitation of CVE-2016-9311 in the wild and no public exploit code.

Other vulnerabilities in Ntp Ntp

• CVE-2018-12327 Memory corruption in n/a Critical 9.8
• CVE-2017-6460 Memory corruption in n/a High 8.8
• CVE-2019-11331 Other in n/a High 8.1
• CVE-2017-6451 Memory corruption in n/a High 7.8
• CVE-2017-6452 Memory corruption in n/a High 7.8

All Ntp Ntp vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2016-9311, GHSA-fwm3-rx8m-qmv5, UBUNTU-CVE-2016-9311.