CVE-2014-9295: Ntp

High severity, CVSS 7.5. EPSS: 79.1% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authentication feature is used, (2) the ctl_putdata function, and (3) the configure function.

Affected products

• Ntp Ntp: up to and including 4.2.7

Published 2014-12-20. Last modified 2026-06-17.