CVE-2014-9293: Ntp

High severity, CVSS 7.5. EPSS: 13% chance of exploitation in the next 30 days.

The config_auth function in ntpd in NTP before 4.2.7p11, when an auth key is not configured, improperly generates a key, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.

Affected products

• Ntp Ntp: up to and including 4.2.7

Published 2014-12-20. Last modified 2026-06-17.