CVE-2009-0159 - CVE House
Back to Database
Status published Medium CVE-2009-0159

Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in...

Vulnerability Description

Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-0159

Credits & Attribution

No credits recorded in the NVD database.

References

More from ntp

View All →
CVE-2020-15025
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101...
Medium 4.4
CVE-2020-13817
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows...
Medium 5.9
CVE-2020-11868
ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows...
Medium 5.9
CVE-2019-11331
Network Time Protocol (NTP), as specified in RFC 5905, uses...
High 8.1
CVE-2018-8956
ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote...
Medium 5.3

Affected Vendor

Affected Software

ntp
Vulnerable Versions:
0, 4.0.72, 4.0.73, 4.0.90, 4.0.91, 4.0.92, 4.0.93, 4.0.94, 4.0.95, 4.0.96, 4.0.97, 4.0.98, 4.0.99, 4.1.0, 4.1.2, 4.2.0, 4.2.2, 4.2.2p1, 4.2.2p2, 4.2.2p3, 4.2.2p4, 4.2.4, 4.2.4p0, 4.2.4p1, 4.2.4p2, 4.2.4p3, 4.2.4p4, 4.2.4p5, 4.2.4p6

Timeline

Official Publish: April 14th, 2009
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.