CVE-2013-5211
N/A
Published: January 2, 2014 at 11:00 AM UTC
Updated: June 16, 2026 at 11:58 PM UTC
3 products affected across 3 vendorsopenSUSELinuxNTP
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 98%
Description
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v < 4.2.74.2.74.2.7 p04.2.7 p14.2.7 p104.2.7 p114.2.7 p124.2.7 p134.2.7 p144.2.7 p154.2.7 p164.2.7 p174.2.7 p184.2.7 p194.2.7 p24.2.7 p204.2.7 p214.2.7 p224.2.7 p234.2.7 p244.2.7 p254.2.7 p34.2.7 p44.2.7 p54.2.7 p64.2.7 p74.2.7 p84.2.7 p9
Affected range stops below 4.2.7, so it looks safe — our inference, not a vendor statement
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (21)
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
http://aix.software.ibm.com/aix/efixes/security/ntp_advisory.ascx_refsource_MISCThird Party AdvisoryUS Government Resource
Source: [email protected]
http://ics-cert.us-cert.gov/advisories/ICSA-14-051-04Mailing Listx_refsource_MLISTBroken Link
Source: [email protected]
http://lists.ntp.org/pipermail/pool/2011-December/005616.htmlVendor Advisoryx_refsource_SUSEThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-updates/2014-09/msg00031.htmlVendor Advisoryx_refsource_HPMailing List
Source: [email protected]
http://marc.info/?l=bugtraq&m=138971294629419&w=2Vendor Advisoryx_refsource_HPMailing ListThird Party Advisory
Source: [email protected]
http://marc.info/?l=bugtraq&m=144182594518755&w=2Mailing Listx_refsource_MLIST
Source: [email protected]
http://openwall.com/lists/oss-security/2013/12/30/6Quick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card