CVE-2016-7434
HIGHNTP 4.3.0-4.3.94 - Denial of Service via Crafted MRU List Query
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2016-7434. PoCs published by Magnus Klaaborg Stubman, opsxcq, shekkbuilder.
AI-analyzed exploit summary This exploit sends a malformed UDP packet to an NTP server, triggering a denial of service (DoS) condition due to improper handling of the payload in vulnerable versions of ntpd. The payload is crafted to exploit a buffer overflow vulnerability in the NTP daemon.
Description
The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.
Exploits (4)
This exploit sends a malformed UDP packet to an NTP server, triggering a denial of service (DoS) condition due to improper handling of the payload in vulnerable versions of ntpd. The payload is crafted to exploit a buffer overflow vulnerability in the NTP daemon.
This repository contains a functional exploit for CVE-2016-7434, a null pointer dereference vulnerability in ntpd that causes a denial-of-service (DoS) when processing a crafted mrulist query packet. The exploit includes both Python and Bash scripts to trigger the crash, along with a Docker environment for testing.
This repository contains a functional Python script that exploits CVE-2016-7434, a pre-authentication denial-of-service vulnerability in NTPd. The exploit sends a malformed UDP packet to trigger a crash in vulnerable NTPd versions.
This repository contains a Dockerized environment for NTP 4.2.8p8, which is vulnerable to CVE-2016-7434. The Dockerfile sets up a vulnerable NTP server, allowing for testing and exploitation of the vulnerability.
References (10)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H