CVE-2014-9751: Input Validation
The readnetworkpacket function in ntpio.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a source IP address is an IPv6 loopback address, which makes it easier for remote attackers to spoof restricted packets, and read or write to the runtime state, by leveraging the ability to reach the ntpd machine's network interface with a packet from the ::1 address.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9751?
CVE-2014-9751 is considered a moderate severity vulnerability that allows remote attackers to spoof restricted packets.
How do I fix CVE-2014-9751?
To fix CVE-2014-9751, upgrade NTP to version 4.2.8p1 or later.
Which versions of NTP are affected by CVE-2014-9751?
NTP versions before 4.2.8p1, specifically 4.2.0 through 4.2.8, are affected by CVE-2014-9751.
Can CVE-2014-9751 impact Linux and macOS users?
Yes, CVE-2014-9751 affects NTP versions running on Linux and macOS platforms.
What types of attacks can CVE-2014-9751 facilitate?
CVE-2014-9751 can facilitate attacks that allow remote attackers to read or write to the runtime state of the NTP service.