CVE-2009-0159: Ntp

Medium severity, CVSS 6.8. EPSS: 13.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.

Affected products

• Ntp Ntp: up to and including 4.2.4p7; version 4.0.72 only; version 4.0.73 only; version 4.0.90 only; version 4.0.91 only; version 4.0.92 only; …

Published 2009-04-14. Last modified 2026-06-16.