CVE-2014-5209

moderate-risk
Published 2020-01-08

An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.

Do I need to act?

-
0.74% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.3/10 Medium
NETWORK / LOW complexity

Affected Products (20)

Ntp

Affected Vendors

F5 Ntp

References (8)

Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/95841
https://support.f5.com/csp/article/K44942017
https://support.f5.com/csp/article/K44942017
https://support.f5.com/csp/article/K44942017?utm_source=f5support&amp%3Butm_medi...
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/95841
https://support.f5.com/csp/article/K44942017
https://support.f5.com/csp/article/K44942017
https://support.f5.com/csp/article/K44942017?utm_source=f5support&amp%3Butm_medi...
48
/ 100
moderate-risk
Severity 21/34 · High
Exploitability 2/34 · Minimal
Exposure 25/34 · High