CVE-2013-5211: Ntp

Medium severity, CVSS 5.0. EPSS: 97.5% chance of exploitation in the next 30 days.

The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.

Affected products

• Ntp Ntp: before 4.2.7 (fixed in 4.2.7); version 4.2.7 only
• Opensuse Opensuse: version 11.4 only
• Oracle Linux: version 6 only; version 7 only

Published 2014-01-02. Last modified 2026-06-16.