CVE-2009-1252

Published: May 19, 2009Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.

Affected (78)

Products: Ntp: Ntp

Ntp

1 product

Ntp

Configuration A

78 vulnerable

Vulnerable Software	Affected Versions
Ntp Ntp	Version 4.2.4p0
Ntp Ntp	Version 4.2.4p1
Ntp Ntp	Version 4.2.4p2
Ntp Ntp	Version 4.2.4p3
Ntp Ntp	Version 4.2.4p4
Ntp Ntp	Version 4.2.4p5
Ntp Ntp	Version 4.2.4p6
Ntp Ntp	Version 4.2.5p0
Ntp Ntp	Version 4.2.5p10
Ntp Ntp	Version 4.2.5p11
Ntp Ntp	Version 4.2.5p12
Ntp Ntp	Version 4.2.5p13
Ntp Ntp	Version 4.2.5p14
Ntp Ntp	Version 4.2.5p15
Ntp Ntp	Version 4.2.5p16
Ntp Ntp	Version 4.2.5p17
Ntp Ntp	Version 4.2.5p18
Ntp Ntp	Version 4.2.5p19
Ntp Ntp	Version 4.2.5p1
Ntp Ntp	Version 4.2.5p20
Ntp Ntp	Version 4.2.5p21
Ntp Ntp	Version 4.2.5p23
Ntp Ntp	Version 4.2.5p24
Ntp Ntp	Version 4.2.5p25
Ntp Ntp	Version 4.2.5p26
Ntp Ntp	Version 4.2.5p27
Ntp Ntp	Version 4.2.5p28
Ntp Ntp	Version 4.2.5p29
Ntp Ntp	Version 4.2.5p2
Ntp Ntp	Version 4.2.5p30
Ntp Ntp	Version 4.2.5p31
Ntp Ntp	Version 4.2.5p32
Ntp Ntp	Version 4.2.5p33
Ntp Ntp	Version 4.2.5p35
Ntp Ntp	Version 4.2.5p36
Ntp Ntp	Version 4.2.5p37
Ntp Ntp	Version 4.2.5p38
Ntp Ntp	Version 4.2.5p39
Ntp Ntp	Version 4.2.5p3
Ntp Ntp	Version 4.2.5p40
Ntp Ntp	Version 4.2.5p41
Ntp Ntp	Version 4.2.5p42
Ntp Ntp	Version 4.2.5p43
Ntp Ntp	Version 4.2.5p44
Ntp Ntp	Version 4.2.5p45
Ntp Ntp	Version 4.2.5p46
Ntp Ntp	Version 4.2.5p47
Ntp Ntp	Version 4.2.5p48
Ntp Ntp	Version 4.2.5p49
Ntp Ntp	Version 4.2.5p4
Ntp Ntp	Version 4.2.5p50
Ntp Ntp	Version 4.2.5p51
Ntp Ntp	Version 4.2.5p52
Ntp Ntp	Version 4.2.5p53
Ntp Ntp	Version 4.2.5p54
Ntp Ntp	Version 4.2.5p55
Ntp Ntp	Version 4.2.5p56
Ntp Ntp	Version 4.2.5p57
Ntp Ntp	Version 4.2.5p58
Ntp Ntp	Version 4.2.5p59
Ntp Ntp	Version 4.2.5p5
Ntp Ntp	Version 4.2.5p60
Ntp Ntp	Version 4.2.5p61
Ntp Ntp	Version 4.2.5p62
Ntp Ntp	Version 4.2.5p63
Ntp Ntp	Version 4.2.5p64
Ntp Ntp	Version 4.2.5p65
Ntp Ntp	Version 4.2.5p66
Ntp Ntp	Version 4.2.5p67
Ntp Ntp	Version 4.2.5p68
Ntp Ntp	Version 4.2.5p69
Ntp Ntp	Version 4.2.5p6
Ntp Ntp	Version 4.2.5p70
Ntp Ntp	Version 4.2.5p71
Ntp Ntp	Version 4.2.5p73
Ntp Ntp	Version 4.2.5p7
Ntp Ntp	Version 4.2.5p8
Ntp Ntp	Version 4.2.5p9

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (78)

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc (unsafe URL)

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2009-1039.html

Source: cve@mitre.org

Patch

http://rhn.redhat.com/errata/RHSA-2009-1040.html

Source: cve@mitre.org

Patch

http://secunia.com/advisories/35137

Source: cve@mitre.org

http://secunia.com/advisories/35138

Source: cve@mitre.org

http://secunia.com/advisories/35166

Source: cve@mitre.org

http://secunia.com/advisories/35169

Source: cve@mitre.org

http://secunia.com/advisories/35243

Source: cve@mitre.org

http://secunia.com/advisories/35253

Source: cve@mitre.org

http://secunia.com/advisories/35308

Source: cve@mitre.org

http://secunia.com/advisories/35336

Source: cve@mitre.org

http://secunia.com/advisories/35388

Source: cve@mitre.org

http://secunia.com/advisories/35416

Source: cve@mitre.org

http://secunia.com/advisories/35630

Source: cve@mitre.org

http://secunia.com/advisories/37470

Source: cve@mitre.org

http://secunia.com/advisories/37471

Source: cve@mitre.org

http://security.freebsd.org/advisories/FreeBSD-SA-09:11.ntpd.asc

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238

Source: cve@mitre.org

http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0092

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1801

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/853097

Source: cve@mitre.org

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2009:117

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/35017

Source: cve@mitre.org

http://www.securitytracker.com/id?1022243

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/1361

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/3316

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=499694

Source: cve@mitre.org

Patch

https://launchpad.net/bugs/cve/2009-1252

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11231

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6307

Source: cve@mitre.org

https://support.ntp.org/bugs/show_bug.cgi?id=1151

Source: cve@mitre.org

https://usn.ubuntu.com/777-1/

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00293.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html

Source: cve@mitre.org

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc (unsafe URL)