VULNERABILITY INTELLIGENCE
CVE-2016-2518
CVSS score5.3 MEDIUM
EPSS probability15.08%
CISA KEVNot currently listed
Published2017-01-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Description
The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
Weakness classification
- CWE-125: Out-of-bounds Read