CVE-2016-2518

Summary

CVECVE-2016-2518
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2017-01-30 21:59:00 UTC
Updated2021-06-10 13:15:00 UTC
DescriptionThe MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.

Risk And Classification

Problem Types: CWE-125

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Debian Debian Linux 10.0 All All All
Operating System Debian Debian Linux 8.0 All All All
Operating System Debian Debian Linux 9.0 All All All
Operating System Freebsd Freebsd 10.1 - All All
Operating System Freebsd Freebsd 10.1 p1 All All
Operating System Freebsd Freebsd 10.1 p10 All All
Operating System Freebsd Freebsd 10.1 p12 All All
Operating System Freebsd Freebsd 10.1 p15 All All
Operating System Freebsd Freebsd 10.1 p16 All All
Operating System Freebsd Freebsd 10.1 p17 All All
Operating System Freebsd Freebsd 10.1 p18 All All
Operating System Freebsd Freebsd 10.1 p19 All All
Operating System Freebsd Freebsd 10.1 p2 All All
Operating System Freebsd Freebsd 10.1 p22 All All
Operating System Freebsd Freebsd 10.1 p24 All All
Operating System Freebsd Freebsd 10.1 p25 All All
Operating System Freebsd Freebsd 10.1 p26 All All
Operating System Freebsd Freebsd 10.1 p27 All All
Operating System Freebsd Freebsd 10.1 p28 All All
Operating System Freebsd Freebsd 10.1 p29 All All
Operating System Freebsd Freebsd 10.1 p3 All All
Operating System Freebsd Freebsd 10.1 p30 All All
Operating System Freebsd Freebsd 10.1 p31 All All
Operating System Freebsd Freebsd 10.1 p4 All All
Operating System Freebsd Freebsd 10.1 p5 All All
Operating System Freebsd Freebsd 10.1 p6 All All
Operating System Freebsd Freebsd 10.1 p7 All All
Operating System Freebsd Freebsd 10.1 p8 All All
Operating System Freebsd Freebsd 10.1 p9 All All
Operating System Freebsd Freebsd 10.2 - All All
Operating System Freebsd Freebsd 10.2 p1 All All
Operating System Freebsd Freebsd 10.2 p10 All All
Operating System Freebsd Freebsd 10.2 p11 All All
Operating System Freebsd Freebsd 10.2 p12 All All
Operating System Freebsd Freebsd 10.2 p13 All All
Operating System Freebsd Freebsd 10.2 p14 All All
Operating System Freebsd Freebsd 10.2 p2 All All
Operating System Freebsd Freebsd 10.2 p5 All All
Operating System Freebsd Freebsd 10.2 p7 All All
Operating System Freebsd Freebsd 10.2 p8 All All
Operating System Freebsd Freebsd 10.2 p9 All All
Operating System Freebsd Freebsd 10.3 - All All
Operating System Freebsd Freebsd 9.3 - All All
Operating System Freebsd Freebsd 9.3 p1 All All
Operating System Freebsd Freebsd 9.3 p10 All All
Operating System Freebsd Freebsd 9.3 p12 All All
Operating System Freebsd Freebsd 9.3 p13 All All
Operating System Freebsd Freebsd 9.3 p16 All All
Operating System Freebsd Freebsd 9.3 p19 All All
Operating System Freebsd Freebsd 9.3 p2 All All
Operating System Freebsd Freebsd 9.3 p20 All All
Operating System Freebsd Freebsd 9.3 p21 All All
Operating System Freebsd Freebsd 9.3 p22 All All
Operating System Freebsd Freebsd 9.3 p23 All All
Operating System Freebsd Freebsd 9.3 p24 All All
Operating System Freebsd Freebsd 9.3 p25 All All
Operating System Freebsd Freebsd 9.3 p28 All All
Operating System Freebsd Freebsd 9.3 p3 All All
Operating System Freebsd Freebsd 9.3 p30 All All
Operating System Freebsd Freebsd 9.3 p31 All All
Operating System Freebsd Freebsd 9.3 p32 All All
Operating System Freebsd Freebsd 9.3 p33 All All
Operating System Freebsd Freebsd 9.3 p34 All All
Operating System Freebsd Freebsd 9.3 p35 All All
Operating System Freebsd Freebsd 9.3 p36 All All
Operating System Freebsd Freebsd 9.3 p38 All All
Operating System Freebsd Freebsd 9.3 p39 All All
Operating System Freebsd Freebsd 9.3 p5 All All
Operating System Freebsd Freebsd 9.3 p6 All All
Operating System Freebsd Freebsd 9.3 p7 All All
Operating System Freebsd Freebsd 9.3 p8 All All
Operating System Freebsd Freebsd 9.3 p9 All All
Application Netapp Clustered Data Ontap - All All All
Application Netapp Data Ontap - All All All
Application Netapp Oncommand Balance - All All All
Application Netapp Oncommand Performance Manager - All All All
Application Netapp Oncommand Unified Manager For Clustered Data Ontap - All All All
Application Ntp Ntp All All All All
Application Ntp Ntp 4.2.8 - All All
Application Ntp Ntp 4.2.8 p1 All All
Application Ntp Ntp 4.2.8 p1-beta1 All All
Application Ntp Ntp 4.2.8 p1-beta2 All All
Application Ntp Ntp 4.2.8 p1-beta3 All All
Application Ntp Ntp 4.2.8 p1-beta4 All All
Application Ntp Ntp 4.2.8 p1-beta5 All All
Application Ntp Ntp 4.2.8 p1-rc1 All All
Application Ntp Ntp 4.2.8 p1-rc2 All All
Application Ntp Ntp 4.2.8 p2 All All
Application Ntp Ntp 4.2.8 p2-rc1 All All
Application Ntp Ntp 4.2.8 p2-rc2 All All
Application Ntp Ntp 4.2.8 p2-rc3 All All
Application Ntp Ntp 4.2.8 p3 All All
Application Ntp Ntp 4.2.8 p3-rc1 All All
Application Ntp Ntp 4.2.8 p3-rc2 All All
Application Ntp Ntp 4.2.8 p3-rc3 All All
Application Ntp Ntp 4.2.8 p4 All All
Application Ntp Ntp 4.2.8 p5 All All
Application Ntp Ntp 4.2.8 p6 All All
Application Ntp Ntp 4.2.8 p7 All All
Application Ntp Ntp 4.2.8 p8 All All
Application Ntp Ntp 4.3.0 All All All
Application Ntp Ntp 4.3.1 All All All
Application Ntp Ntp 4.3.10 All All All
Application Ntp Ntp 4.3.11 All All All
Application Ntp Ntp 4.3.12 All All All
Application Ntp Ntp 4.3.13 All All All
Application Ntp Ntp 4.3.14 All All All
Application Ntp Ntp 4.3.15 All All All
Application Ntp Ntp 4.3.16 All All All
Application Ntp Ntp 4.3.17 All All All
Application Ntp Ntp 4.3.18 All All All
Application Ntp Ntp 4.3.19 All All All
Application Ntp Ntp 4.3.2 All All All
Application Ntp Ntp 4.3.20 All All All
Application Ntp Ntp 4.3.21 All All All
Application Ntp Ntp 4.3.22 All All All
Application Ntp Ntp 4.3.23 All All All
Application Ntp Ntp 4.3.24 All All All
Application Ntp Ntp 4.3.25 All All All
Application Ntp Ntp 4.3.26 All All All
Application Ntp Ntp 4.3.27 All All All
Application Ntp Ntp 4.3.28 All All All
Application Ntp Ntp 4.3.29 All All All
Application Ntp Ntp 4.3.3 All All All
Application Ntp Ntp 4.3.30 All All All
Application Ntp Ntp 4.3.31 All All All
Application Ntp Ntp 4.3.32 All All All
Application Ntp Ntp 4.3.33 All All All
Application Ntp Ntp 4.3.34 All All All
Application Ntp Ntp 4.3.35 All All All
Application Ntp Ntp 4.3.36 All All All
Application Ntp Ntp 4.3.37 All All All
Application Ntp Ntp 4.3.38 All All All
Application Ntp Ntp 4.3.39 All All All
Application Ntp Ntp 4.3.4 All All All
Application Ntp Ntp 4.3.40 All All All
Application Ntp Ntp 4.3.41 All All All
Application Ntp Ntp 4.3.42 All All All
Application Ntp Ntp 4.3.43 All All All
Application Ntp Ntp 4.3.44 All All All
Application Ntp Ntp 4.3.45 All All All
Application Ntp Ntp 4.3.46 All All All
Application Ntp Ntp 4.3.47 All All All
Application Ntp Ntp 4.3.48 All All All
Application Ntp Ntp 4.3.49 All All All
Application Ntp Ntp 4.3.5 All All All
Application Ntp Ntp 4.3.50 All All All
Application Ntp Ntp 4.3.51 All All All
Application Ntp Ntp 4.3.52 All All All
Application Ntp Ntp 4.3.53 All All All
Application Ntp Ntp 4.3.54 All All All
Application Ntp Ntp 4.3.55 All All All
Application Ntp Ntp 4.3.56 All All All
Application Ntp Ntp 4.3.57 All All All
Application Ntp Ntp 4.3.58 All All All
Application Ntp Ntp 4.3.59 All All All
Application Ntp Ntp 4.3.6 All All All
Application Ntp Ntp 4.3.60 All All All
Application Ntp Ntp 4.3.61 All All All
Application Ntp Ntp 4.3.62 All All All
Application Ntp Ntp 4.3.63 All All All
Application Ntp Ntp 4.3.64 All All All
Application Ntp Ntp 4.3.65 All All All
Application Ntp Ntp 4.3.66 All All All
Application Ntp Ntp 4.3.67 All All All
Application Ntp Ntp 4.3.68 All All All
Application Ntp Ntp 4.3.69 All All All
Application Ntp Ntp 4.3.7 All All All
Application Ntp Ntp 4.3.70 All All All
Application Ntp Ntp 4.3.71 All All All
Application Ntp Ntp 4.3.72 All All All
Application Ntp Ntp 4.3.73 All All All
Application Ntp Ntp 4.3.74 All All All
Application Ntp Ntp 4.3.75 All All All
Application Ntp Ntp 4.3.76 All All All
Application Ntp Ntp 4.3.77 All All All
Application Ntp Ntp 4.3.78 All All All
Application Ntp Ntp 4.3.79 All All All
Application Ntp Ntp 4.3.8 All All All
Application Ntp Ntp 4.3.80 All All All
Application Ntp Ntp 4.3.81 All All All
Application Ntp Ntp 4.3.82 All All All
Application Ntp Ntp 4.3.83 All All All
Application Ntp Ntp 4.3.84 All All All
Application Ntp Ntp 4.3.85 All All All
Application Ntp Ntp 4.3.86 All All All
Application Ntp Ntp 4.3.87 All All All
Application Ntp Ntp 4.3.88 All All All
Application Ntp Ntp 4.3.89 All All All
Application Ntp Ntp 4.3.9 All All All
Application Ntp Ntp 4.3.90 All All All
Application Ntp Ntp 4.3.91 All All All
Application Ntp Ntp 4.3.0 All All All
Application Ntp Ntp 4.3.1 All All All
Application Ntp Ntp 4.3.10 All All All
Application Ntp Ntp 4.3.11 All All All
Application Ntp Ntp 4.3.12 All All All
Application Ntp Ntp 4.3.13 All All All
Application Ntp Ntp 4.3.14 All All All
Application Ntp Ntp 4.3.15 All All All
Application Ntp Ntp 4.3.16 All All All
Application Ntp Ntp 4.3.17 All All All
Application Ntp Ntp 4.3.18 All All All
Application Ntp Ntp 4.3.19 All All All
Application Ntp Ntp 4.3.2 All All All
Application Ntp Ntp 4.3.20 All All All
Application Ntp Ntp 4.3.21 All All All
Application Ntp Ntp 4.3.22 All All All
Application Ntp Ntp 4.3.23 All All All
Application Ntp Ntp 4.3.24 All All All
Application Ntp Ntp 4.3.25 All All All
Application Ntp Ntp 4.3.26 All All All
Application Ntp Ntp 4.3.27 All All All
Application Ntp Ntp 4.3.28 All All All
Application Ntp Ntp 4.3.29 All All All
Application Ntp Ntp 4.3.3 All All All
Application Ntp Ntp 4.3.30 All All All
Application Ntp Ntp 4.3.31 All All All
Application Ntp Ntp 4.3.32 All All All
Application Ntp Ntp 4.3.33 All All All
Application Ntp Ntp 4.3.34 All All All
Application Ntp Ntp 4.3.35 All All All
Application Ntp Ntp 4.3.36 All All All
Application Ntp Ntp 4.3.37 All All All
Application Ntp Ntp 4.3.38 All All All
Application Ntp Ntp 4.3.39 All All All
Application Ntp Ntp 4.3.4 All All All
Application Ntp Ntp 4.3.40 All All All
Application Ntp Ntp 4.3.41 All All All
Application Ntp Ntp 4.3.42 All All All
Application Ntp Ntp 4.3.43 All All All
Application Ntp Ntp 4.3.44 All All All
Application Ntp Ntp 4.3.45 All All All
Application Ntp Ntp 4.3.46 All All All
Application Ntp Ntp 4.3.47 All All All
Application Ntp Ntp 4.3.48 All All All
Application Ntp Ntp 4.3.49 All All All
Application Ntp Ntp 4.3.5 All All All
Application Ntp Ntp 4.3.50 All All All
Application Ntp Ntp 4.3.51 All All All
Application Ntp Ntp 4.3.52 All All All
Application Ntp Ntp 4.3.53 All All All
Application Ntp Ntp 4.3.54 All All All
Application Ntp Ntp 4.3.55 All All All
Application Ntp Ntp 4.3.56 All All All
Application Ntp Ntp 4.3.57 All All All
Application Ntp Ntp 4.3.58 All All All
Application Ntp Ntp 4.3.59 All All All
Application Ntp Ntp 4.3.6 All All All
Application Ntp Ntp 4.3.60 All All All
Application Ntp Ntp 4.3.61 All All All
Application Ntp Ntp 4.3.62 All All All
Application Ntp Ntp 4.3.63 All All All
Application Ntp Ntp 4.3.64 All All All
Application Ntp Ntp 4.3.65 All All All
Application Ntp Ntp 4.3.66 All All All
Application Ntp Ntp 4.3.67 All All All
Application Ntp Ntp 4.3.68 All All All
Application Ntp Ntp 4.3.69 All All All
Application Ntp Ntp 4.3.7 All All All
Application Ntp Ntp 4.3.70 All All All
Application Ntp Ntp 4.3.71 All All All
Application Ntp Ntp 4.3.72 All All All
Application Ntp Ntp 4.3.73 All All All
Application Ntp Ntp 4.3.74 All All All
Application Ntp Ntp 4.3.75 All All All
Application Ntp Ntp 4.3.76 All All All
Application Ntp Ntp 4.3.77 All All All
Application Ntp Ntp 4.3.78 All All All
Application Ntp Ntp 4.3.79 All All All
Application Ntp Ntp 4.3.8 All All All
Application Ntp Ntp 4.3.80 All All All
Application Ntp Ntp 4.3.81 All All All
Application Ntp Ntp 4.3.82 All All All
Application Ntp Ntp 4.3.83 All All All
Application Ntp Ntp 4.3.84 All All All
Application Ntp Ntp 4.3.85 All All All
Application Ntp Ntp 4.3.86 All All All
Application Ntp Ntp 4.3.87 All All All
Application Ntp Ntp 4.3.88 All All All
Application Ntp Ntp 4.3.89 All All All
Application Ntp Ntp 4.3.9 All All All
Application Ntp Ntp 4.3.90 All All All
Application Ntp Ntp 4.3.91 All All All
Application Ntp Ntp All p8 All All
Application Oracle Communications User Data Repository 10.0.0 All All All
Application Oracle Communications User Data Repository 10.0.1 All All All
Application Oracle Communications User Data Repository 12.0.0 All All All
Operating System Oracle Linux 6 - All All
Operating System Oracle Linux 7 - All All
Operating System Redhat Enterprise Linux Desktop 7.0 All All All
Operating System Redhat Enterprise Linux Server 6.0 All All All
Operating System Redhat Enterprise Linux Server 7.0 All All All
Operating System Redhat Enterprise Linux Server Aus 7.2 All All All
Operating System Redhat Enterprise Linux Server Aus 7.4 All All All
Operating System Redhat Enterprise Linux Server Aus 7.6 All All All
Operating System Redhat Enterprise Linux Server Eus 7.2 All All All
Operating System Redhat Enterprise Linux Server Eus 7.3 All All All
Operating System Redhat Enterprise Linux Server Eus 7.4 All All All
Operating System Redhat Enterprise Linux Server Eus 7.5 All All All
Operating System Redhat Enterprise Linux Server Eus 7.6 All All All
Operating System Redhat Enterprise Linux Server Eus 7.7 All All All
Operating System Redhat Enterprise Linux Server Tus 7.2 All All All
Operating System Redhat Enterprise Linux Server Tus 7.3 All All All
Operating System Redhat Enterprise Linux Server Tus 7.6 All All All
Operating System Redhat Enterprise Linux Server Tus 7.7 All All All
Operating System Redhat Enterprise Linux Workstation 6.0 All All All
Hardware Siemens Simatic Net Cp 443-1 Opc Ua - All All All
Operating System Siemens Simatic Net Cp 443-1 Opc Ua Firmware All All All All

References

ReferenceSourceLinkTags
[security-announce] openSUSE-SU-2016:1329-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists SUSE lists.opensuse.org
Oracle Solaris Bulletin - April 2016 CONFIRM www.oracle.com Third Party Advisory
Red Hat Customer Portal REDHAT rhn.redhat.com
support.ntp.org/bin/view/Main/SecurityNotice CONFIRM support.ntp.org Vendor Advisory
Siemens SIMATIC NET CP 443-1 OPC UA | CISA MISC us-cert.cisa.gov
[security-announce] SUSE-SU-2016:1568-1: important: Security update for SUSE lists.opensuse.org
NTP: Multiple vulnerabilities (GLSA 201607-15) — Gentoo Security GENTOO security.gentoo.org
support.f5.com/csp/article/K20804323 CONFIRM support.f5.com
cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf CONFIRM cert-portal.siemens.com
openSUSE-SU-2016:1423-1: moderate: Security update for ntp SUSE lists.opensuse.org
Oracle Critical Patch Update - January 2018 CONFIRM www.oracle.com
[SECURITY] Fedora 24 Update: ntp-4.2.6p5-40.fc24 FEDORA lists.fedoraproject.org
Slackware Security Advisory - ntp Updates ≈ Packet Storm MISC packetstormsecurity.com
support.ntp.org/bin/view/Main/NtpBug3009 CONFIRM support.ntp.org Vendor Advisory
April 2016 Network Time Protocol Daemon (ntpd) Vulnerabilities in Multiple NetApp Products | NetApp Product Security CONFIRM security.netapp.com
SecurityFocus BUGTRAQ www.securityfocus.com
ntp Multiple Bugs Let Remote Users Spoof Messages, Obtain Potentially Sensitive Information, Modify Time, and Deny Service - SecurityTracker SECTRACK www.securitytracker.com
[security-announce] SUSE-SU-2016:1471-1: important: Security update for SUSE lists.opensuse.org
Oracle Linux Bulletin - April 2016 CONFIRM www.oracle.com
Vulnerability Note VU#718152 - NTP.org ntpd contains multiple vulnerabilities CERT-VN www.kb.cert.org Third Party Advisory, US Government Resource
Red Hat Customer Portal REDHAT access.redhat.com
[security-announce] SUSE-SU-2016:1278-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists SUSE lists.opensuse.org
Debian -- Security Information -- DSA-3629-1 ntp DEBIAN www.debian.org
[security-announce] SUSE-SU-2016:1912-1: important: Security update for SUSE lists.opensuse.org
Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: April 2016 CISCO tools.cisco.com
[security-announce] SUSE-SU-2016:1291-1: important: Security update for ntp - openSUSE Security Announce - openSUSE Mailing Lists SUSE lists.opensuse.org
[security-announce] SUSE-SU-2016:2094-1: important: Security update for SUSE lists.opensuse.org
[SECURITY] Fedora 23 Update: ntp-4.2.6p5-40.fc23 FEDORA lists.fedoraproject.org
FreeBSD-SA-16:16 FREEBSD security.FreeBSD.org
SecurityFocus BUGTRAQ www.securityfocus.com
NTP CVE-2016-2518 Denial of Service Vulnerability BID www.securityfocus.com Third Party Advisory, VDB Entry
USN-3096-1: NTP vulnerabilities | Ubuntu UBUNTU www.ubuntu.com
Debian -- Security Information -- DSA-3629-1 ntp DEBIAN www.debian.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Legacy QID Mappings

  • 590736 Siemens SIMATIC NET CP 443-1 OPC UA Multiple Vulnerabilities (ICSA-21-159-11)
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report