CVE-2016-9312

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of service via a large UDP packet.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-399

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://nwtime.org/ntp428p9_release/Release Notes, Vendor Advisory
http://support.ntp.org/bin/view/Main/NtpBug3110Issue Tracking, Mitigation, Vendor Advisory
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_VulnerabilitiesVendor Advisory
http://www.securityfocus.com/bid/94450Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037354
https://bto.bluecoat.com/security-advisory/sa139
https://www.kb.cert.org/vuls/id/633847Third Party Advisory, US Government Resource
http://nwtime.org/ntp428p9_release/Release Notes, Vendor Advisory
http://support.ntp.org/bin/view/Main/NtpBug3110Issue Tracking, Mitigation, Vendor Advisory
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_VulnerabilitiesVendor Advisory
http://www.securityfocus.com/bid/94450Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037354
https://bto.bluecoat.com/security-advisory/sa139
https://www.kb.cert.org/vuls/id/633847Third Party Advisory, US Government Resource

Timeline

Published: Jan 13, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-93137.8security/keys/big_key.c in the Linux kernel before 4.8.7 mishandles unsuccessful crypto registration in conjunction with successful key-type CVE-2016-93147.8Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) CVE-2016-93158.8Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual A CVE-2016-93165.4Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterSca CVE-2016-93175.5The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (system CVE-2016-93185.5libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the curre CVE-2016-93195.9There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398.CVE-2016-93327.5An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker CVE-2016-93339.8An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. The SoftCMS Application does not properly sanitize input that may all CVE-2016-93347.3An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prio CVE-2016-933510.0A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version CVE-2016-93376.8An issue was discovered in Tesla Motors Model S automobile, all firmware versions before version 7.1 (2.36.31) with web browser functionalit