CVE-2016-9310: Medium severity NTP ntp vulnerability
Last updated 25 August 2025
Other sources
The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.
— Debian
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ntpto a version that resolves this vulnerability.Fixed in 1:4.2.8p15+dfsg-1 - Upgrade
Upgrade
ntpd (NTP)to a version that resolves this vulnerability.Fixed in 4.2.8p9
Event History
Frequently Asked Questions
What is CVE-2016-9310?
CVE-2016-9310 is a vulnerability in ntpd in NTP before 4.2.8p9 that allows remote attackers to set or unset traps via a crafted control mode packet.
How does CVE-2016-9310 affect NTP?
CVE-2016-9310 allows remote attackers to manipulate traps in NTP before 4.2.8p9.
What is the severity of CVE-2016-9310?
The severity of CVE-2016-9310 is medium, with a CVSS severity score of 6.5.
Which versions of NTP are affected by CVE-2016-9310?
NTP versions before 4.2.8p9 are affected by CVE-2016-9310.
How can I fix CVE-2016-9310?
To fix CVE-2016-9310, update NTP to version 4.2.8p9 or later.