{"id":"CVE-2016-9042","url":"https://www.cyber-defence.io/tools/cve/CVE-2016-9042","generatedAt":"2026-10-28T20:05:46.468Z","title":"An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9.","description":"An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.","published":"2018-06-04T20:29:00.000Z","lastModified":"2026-06-17T00:55:20.000Z","status":"Modified","sourceIdentifier":"talos-cna@cisco.com","cvss":{"version":"3.1","score":5.9,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-20"],"affected":["ntp/ntp","freebsd/freebsd","hpe/hpux-ntp","siemens/simatic net cp 443-1 opc ua firmware"],"epss":{"score":0.0391,"percentile":0.90233,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (3.91%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html","source":"talos-cna@cisco.com"},{"url":"http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html","source":"talos-cna@cisco.com"},{"url":"http://seclists.org/fulldisclosure/2017/Nov/7","source":"talos-cna@cisco.com"},{"url":"http://seclists.org/fulldisclosure/2017/Sep/62","source":"talos-cna@cisco.com"},{"url":"http://www.securityfocus.com/archive/1/540403/100/0/threaded","source":"talos-cna@cisco.com"},{"url":"http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded","source":"talos-cna@cisco.com"},{"url":"http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded","source":"talos-cna@cisco.com"},{"url":"http://www.securityfocus.com/bid/97046","tags":["Permissions Required","Third Party Advisory","VDB Entry"],"source":"talos-cna@cisco.com"},{"url":"http://www.securitytracker.com/id/1038123","tags":["Third Party Advisory","VDB Entry"],"source":"talos-cna@cisco.com"},{"url":"http://www.securitytracker.com/id/1039427","tags":["Third Party Advisory","VDB Entry"],"source":"talos-cna@cisco.com"},{"url":"http://www.ubuntu.com/usn/USN-3349-1","source":"talos-cna@cisco.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa147","source":"talos-cna@cisco.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf","tags":["Third Party Advisory"],"source":"talos-cna@cisco.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10201","source":"talos-cna@cisco.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/","source":"talos-cna@cisco.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc","tags":["Third Party Advisory"],"source":"talos-cna@cisco.com"},{"url":"https://support.apple.com/kb/HT208144","source":"talos-cna@cisco.com"},{"url":"https://support.f5.com/csp/article/K39041624","source":"talos-cna@cisco.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us","tags":["Third Party Advisory"],"source":"talos-cna@cisco.com"},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11","source":"talos-cna@cisco.com"},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260","tags":["Exploit","Mitigation","Third Party Advisory"],"source":"talos-cna@cisco.com"},{"url":"http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2017/Nov/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2017/Sep/62","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/540403/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/archive/1/540403/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/archive/1/540464/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/97046","tags":["Permissions Required","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1038123","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1039427","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3349-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:03.ntp.asc","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT208144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K39041624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0260","tags":["Exploit","Mitigation","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-9042","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}