CVE-2019-8936: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 5.7% chance of exploitation in the next 30 days.

NTP through 4.2.8p12 has a NULL Pointer Dereference.

Affected products

• Fedoraproject Fedora: version 28 only; version 29 only; version 30 only
• HPE Hpux-Ntp: before c.4.2.8.4.0 (fixed in c.4.2.8.4.0)
• Netapp Clustered Data Ontap: before 9.2 (fixed in 9.2)
• Netapp Data Ontap: affected versions not specified
• Ntp Ntp: before 4.2.8 (fixed in 4.2.8); version 4.2.8 only
• Opensuse Leap: version 15.0 only; version 42.3 only

Published 2019-05-15. Last modified 2026-06-17.