CVE-2014-9751

The read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a source IP address is an IPv6 loopback address, which makes it easier for remote attackers to spoof restricted packets, and read or write to the runtime state, by leveraging the ability to reach the ntpd machine's network interface with a packet from the ::1 address.

• CWE-20

• http://bugs.ntp.org/show_bug.cgi?id=2672Issue Tracking, Patch, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1459.htmlThird Party Advisory
• http://support.ntp.org/bin/view/Main/SecurityNotice#December_2014_NTP_Security_VulneVendor Advisory
• http://www.debian.org/security/2015/dsa-3388Third Party Advisory
• http://www.kb.cert.org/vuls/id/852879Third Party Advisory, US Government Resource
• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlThird Party Advisory
• http://www.securityfocus.com/bid/72584Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1184572Issue Tracking, Third Party Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03886en_usThird Party Advisory
• http://bugs.ntp.org/show_bug.cgi?id=2672Issue Tracking, Patch, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1459.htmlThird Party Advisory
• http://support.ntp.org/bin/view/Main/SecurityNotice#December_2014_NTP_Security_VulneVendor Advisory
• http://www.debian.org/security/2015/dsa-3388Third Party Advisory
• http://www.kb.cert.org/vuls/id/852879Third Party Advisory, US Government Resource
• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlThird Party Advisory
• http://www.securityfocus.com/bid/72584Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1184572Issue Tracking, Third Party Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03886en_usThird Party Advisory

Published

Oct 6, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-9745The parse_encoding function in type1/t1load.c in FreeType be…
• CVE-2014-9746The (1) t1_parse_font_matrix function in type1/t1load.c, (2)…
• CVE-2014-9747The t42_parse_encoding function in type42/t42parse.c in Free…
• CVE-2014-9748The uv_rwlock_t fallback implementation for Windows XP and S…8.1
• CVE-2014-9749Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when D…
• CVE-2014-9750ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey…
• CVE-2014-9752Unrestricted file upload vulnerability in mods/_core/propert…
• CVE-2014-9753confirm.php in ATutor 2.2 and earlier allows remote attacker…9.8
• CVE-2014-9754The hardware VPN client in Viprinet MultichannelVPN Router 3…
• CVE-2014-9755The hardware VPN client in Viprinet MultichannelVPN Router 3…
• CVE-2014-9756The psf_fwrite function in file_io.c in libsndfile allows at…
• CVE-2014-9757The Ignite Realtime Smack XMPP API, as used in Atlassian Bam…