CVE catalog
CVE-2014-9751
DEBIAN-CVE-2014-9751
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 4.53% · Oct 25, 2026
The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a source IP address is an IPv6 loopback address, which makes it easier for remote attackers to spoof restricted packets, and read or write to the runtime state, by leveraging the ability to reach the ntpd machine's network interface with a packet from the ::1 address.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | ntp | 11 | 1:4.2.6.p5+dfsg-4 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | ntp | deb | 11 | 1:4.2.6.p5+dfsg-4 | Not reported | DEBIAN-CVE-2014-9751 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: