Buffer overflow in Ntp

CVE-2009-1252

Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.

Vulnerability class: Buffer Overflow

EPSS: 0.211 (97.3th percentile) — read the EPSS interpretation.

Affected products

  • Ntp — versions 4.2.4p0, 4.2.4p1, 4.2.4p2
  • N/a — versions n/a

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2009-1252?
CVE-2009-1252 is a vulnerability in Ntp, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2009-05-19.
Is CVE-2009-1252 known to be exploited?
3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.