Network Time Foundation NTP

Name: Network Time Foundation NTP
Brand: Network Time Foundation

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

5critical9high13medium0low

updated 2026-10-27

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-5211US	medium5.0	97.5% (100th)	Exploit	no fix	2014-01-02	≤ 4.2.7p26
CVE-2015-7871US	critical9.8	81.8% (100th)	Exploit	no fix	2017-08-07	2 versions
CVE-2009-3563US	medium6.4	32.1% (98th)	Exploit	no fix	2009-12-09	2 versions
CVE-2018-7182US	high7.5	28.8% (98th)	Exploit	no fix	2018-03-06	4.2.8p6 → 4.2.8p11
CVE-2018-12327US	critical9.8	28.0% (98th)	Exploit	no fix	2018-06-20	≤ 4.2.8p11
CVE-2019-8936US	high7.5	5.73% (93rd)	Exploit	no fix	2019-05-15	≤ 4.2.8
CVE-2024-2169US	—	5.40% (93rd)	Exploit	no fix	2024-03-19	2 versions
CVE-2015-7705US	critical9.8	12.2% (96th)	—	no fix	2017-08-07	2 versions
CVE-2015-7853US	critical9.8	11.8% (96th)	—	no fix	2017-08-07	2 versions
CVE-2018-7183US	critical9.8	10.2% (96th)	—	no fix	2018-03-08	2 versions
CVE-2018-7185US	high7.5	9.00% (95th)	—	no fix	2018-03-06	2 versions
CVE-2018-7184US	high7.5	8.63% (95th)	—	no fix	2018-03-06	2 versions
CVE-2015-7701US	high7.5	6.52% (94th)	—	no fix	2017-08-07	2 versions
CVE-2017-6463US	medium6.5	5.24% (92nd)	—	no fix	2017-03-27	2 versions
CVE-2017-6464US	medium6.5	5.10% (92nd)	—	no fix	2017-03-27	2 versions
CVE-2020-13817US	high7.4OT elevated	3.36% (89th)	—	no fix	2020-06-04	2 versions
CVE-2018-8956US	medium5.3	3.14% (88th)	—	no fix	2020-05-06	4 versions
CVE-2020-15025US	medium4.9	3.14% (88th)	—	no fix	2020-06-24	5 versions
CVE-2016-1549US	medium6.5	3.12% (88th)	—	no fix	2017-01-06	≤ 4.2.8p11
CVE-2018-7170US	medium5.3	2.69% (86th)	—	no fix	2018-03-06	3 versions
CVE-2019-11331US	high8.1	2.64% (85th)	—	no fix	2019-04-18	—
CVE-2020-11868US	high7.5	2.12% (82nd)	—	no fix	2020-04-17	3 versions
CVE-2023-26553US	medium5.6	0.70% (53rd)	—	no fix	2023-04-11	≤ 4.2.8p15
CVE-2023-26551US	medium5.6	0.66% (51st)	—	no fix	2023-04-11	≤ 4.2.8p15
CVE-2023-26554US	medium5.6	0.64% (50th)	—	no fix	2023-04-11	≤ 4.2.8p15
CVE-2023-26552US	medium5.6	0.64% (50th)	—	no fix	2023-04-11	≤ 4.2.8p15
CVE-2023-26555US	medium6.4	0.52% (44th)	—	no fix	2023-04-11	≤ 4.2.8p15
CVE-2017-6462US	high7.8	0.49% (42nd)	—	no fix	2017-03-27	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation7 CVEs
CWE-787Out-of-bounds Write7 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-19CWE-192 CVEs
CWE-401Missing Release of Memory after Effective Lifetime2 CVEs
CWE-406Insufficient Control of Network Message Volume (Network Amplification)2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan