CVE-2009-1252

NTP < 4.2.4p7 and 4.2.5 < 4.2.5p74 - Remote Code Execution via Crafted Autokey Packet

Title source: llm
STIX 2.1

Description

Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.

References (39)

Core 39
Core References
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/777-1/
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35137
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35166
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37470
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35388
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35243
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37471
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2009/dsa-1801
Vendor Advisory vendor-advisory x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35308
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35253
Various Sources x_refsource_confirm
https://support.ntp.org/bugs/show_bug.cgi?id=1151
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2009:117
Third Party Advisory x_refsource_confirm
http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0092
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1022243
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35138
Vendor Advisory vendor-advisory x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html
Vendor Advisory vendor-advisory x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00293.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35630
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/507985/100/0/threaded
Various Sources x_refsource_misc
https://launchpad.net/bugs/cve/2009-1252
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11231
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/35017
Patch vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2009-1040.html
Various Sources vendor-advisory x_refsource_freebsd
http://security.freebsd.org/advisories/FreeBSD-SA-09:11.ntpd.asc
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35416
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/853097
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35336
Vendor Advisory vendor-advisory x_refsource_netbsd
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc
Patch vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2009-1039.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1361
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6307
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35169
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/3316

Scores

EPSS 0.2112
EPSS Percentile 97.3%

Details

CWE
CWE-119
Status published
Products (50)
ntp/ntp 4.2.4p0
ntp/ntp 4.2.4p1
ntp/ntp 4.2.4p2
ntp/ntp 4.2.4p3
ntp/ntp 4.2.4p4
ntp/ntp 4.2.4p5
ntp/ntp 4.2.4p6
ntp/ntp 4.2.5p0
ntp/ntp 4.2.5p1
ntp/ntp 4.2.5p2
... and 40 more
Published May 19, 2009
Tracked Since Feb 18, 2026