http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.html

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html

http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html

http://packetstormsecurity.com/files/136864/Slackware-Security-Advisory-ntp-Updates.html

http://rhn.redhat.com/errata/RHSA-2016-1552.html

http://support.ntp.org/bin/view/Main/NtpBug3009

http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_ntp_4_2_8p7_Security

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd

http://www.debian.org/security/2016/dsa-3629

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

http://www.securityfocus.com/archive/1/538233/100/0/threaded

http://www.securityfocus.com/archive/1/archive/1/538233/100/0/threaded

http://www.securityfocus.com/bid/88226

http://www.securitytracker.com/id/1035705

http://www.ubuntu.com/usn/USN-3096-1

https://access.redhat.com/errata/RHSA-2016:1141

https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc

https://security.gentoo.org/glsa/201607-15

https://security.netapp.com/advisory/ntap-20171004-0002/

https://support.f5.com/csp/article/K20804323

https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11

https://www.debian.org/security/2016/dsa-3629

https://www.kb.cert.org/vuls/id/718152

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.html [No Types Assigned]

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html [No Types Assigned]

http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html [No Types Assigned]

http://packetstormsecurity.com/files/136864/Slackware-Security-Advisory-ntp-Updates.html [No Types Assigned]

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd [No Types Assigned]

http://www.securityfocus.com/archive/1/538233/100/0/threaded [No Types Assigned]

http://www.securityfocus.com/archive/1/archive/1/538233/100/0/threaded [No Types Assigned]

http://www.ubuntu.com/usn/USN-3096-1 [No Types Assigned]

https://support.f5.com/csp/article/K20804323 [No Types Assigned]

https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11 [No Types Assigned]

https://www.debian.org/security/2016/dsa-3629 [No Types Assigned]

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

OR
     *cpe:2.3:a:ntp:ntp:*:p8:*:*:*:*:*:* versions up to (including) 4.2.8

OR
     *cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:* versions up to (excluding) 4.2.8
     *cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.2.8:p

OR
     *cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.9:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:*
     *cpe:2.

OR
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:simatic_net_cp_443-1_opc_ua_firmware:*:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:siemens:simatic_net_cp_443-1_opc_ua:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
     *cpe:2.3:a:netapp:data_ontap:-:*:*:*:*:7-mode:*:*
     *cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*
     *cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:*
     *cpe:2.3:a:netapp:oncommand_unified_manager_for_clustered_data_ontap:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:communications_user_data_repository:10.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:communications_user_data_repository:10.0.1:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:communications_user_data_repository:12.0.0:*:*:*:*:*:*:*
     *cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*
     *cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*

OR
     *cpe:2.3:o:freebsd:freebsd:9.3:-:*:*:*:*:*:*
     *cpe:2.3:o:freebsd:freebsd:9.3:p1:*:*:*:*:*:*
     *cpe:2.3:o:freebsd:freebsd:9.3:p10:*:*:*:*:*:*
     *cpe:2.3:o:freebsd:freebsd:9.3:p12:*:*:*:*:*:*
     *cpe:2.3:o:freebsd:freebsd:9.3:p13:*:*:*:*:*:*
     *cpe:2.3:o:freebsd:freebsd:9.3:p16:*:*:*:*:*:*
     *cpe:2.3:o:freebsd:freebsd:9.3:p19:*:*:*:*:*:*
     *cpe:2.3:o:freebsd:freebsd:9.3:p2:*:*:*:*:*:*
     *cpe:2.3:o:freebsd:freebsd:9.3:p20:*:*:*:*:*:*
     *cpe:2.3:o:freebsd:freebsd:9

OR
     *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:en

http://rhn.redhat.com/errata/RHSA-2016-1552.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2016-1552.html Broken Link

http://www.debian.org/security/2016/dsa-3629 No Types Assigned

http://www.debian.org/security/2016/dsa-3629 Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html No Types Assigned

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html Patch, Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html Third Party Advisory

http://www.securitytracker.com/id/1035705 No Types Assigned

http://www.securitytracker.com/id/1035705 Third Party Advisory, VDB Entry

https://access.redhat.com/errata/RHSA-2016:1141 No Types Assigned

https://access.redhat.com/errata/RHSA-2016:1141 Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf No Types Assigned

https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf Third Party Advisory

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc No Types Assigned

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc Third Party Advisory

https://security.gentoo.org/glsa/201607-15 No Types Assigned

https://security.gentoo.org/glsa/201607-15 Third Party Advisory

https://security.netapp.com/advisory/ntap-20171004-0002/ No Types Assigned

https://security.netapp.com/advisory/ntap-20171004-0002/ Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf [No Types Assigned]

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html [No Types Assigned]

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2016-1552.html [No Types Assigned]

https://access.redhat.com/errata/RHSA-2016:1141 [No Types Assigned]

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc [No Types Assigned]

https://security.netapp.com/advisory/ntap-20171004-0002/ [No Types Assigned]

http://www.debian.org/security/2016/dsa-3629 [No Types Assigned]

http://www.securitytracker.com/id/1035705 [No Types Assigned]

https://security.gentoo.org/glsa/201607-15 [No Types Assigned]

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

(AV:N/AC:L/Au:N/C:N/I:N/A:P)

CWE-125

OR
     *cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:* (and previous)

OR
     *cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:*
     *cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:*
    

http://support.ntp.org/bin/view/Main/NtpBug3009 No Types Assigned

http://support.ntp.org/bin/view/Main/NtpBug3009 Vendor Advisory

http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_ntp_4_2_8p7_Security No Types Assigned

http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_ntp_4_2_8p7_Security Vendor Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html No Types Assigned

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html Third Party Advisory

http://www.securityfocus.com/bid/88226 No Types Assigned

http://www.securityfocus.com/bid/88226 Third Party Advisory, VDB Entry

https://www.kb.cert.org/vuls/id/718152 No Types Assigned

https://www.kb.cert.org/vuls/id/718152 Third Party Advisory, US Government Resource

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html [No Types Assigned]

The MATCH_ASSOC funtion in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.

The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.

http://www.securityfocus.com/bid/88226 [No Types Assigned]