PatchTheCVEntp server firmware vulnerabilities and fixes
Recent CVEs affecting ntp server firmware, with upgrade or downgrade steps. 4 tracked.
Also searched as: ntpserverfirmware.
ntp server firmware has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2016-07-03. Highest priority: CVE-2016-3962 (score 59/100).
- CVE-2016-3989 HIGH 8.1 UPGRADE MITIGATE The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900
- CVE-2016-3988 HIGH 7.3 UPGRADE MITIGATE Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANT
- CVE-2016-3962 HIGH 7.3 UPGRADE MITIGATE Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000,
- CVE-2014-5417 HIGH 7.5 MITIGATE UPGRADE Cross-site scripting (XSS) vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019
FAQ
How do I fix ntp server firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ntp server firmware being exploited right now?
None of the tracked ntp server firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ntp server firmware CVE should I patch first?
CVE-2016-3962 currently ranks highest (59/100): Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000,.