CVE-2016-9312

ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of service via a large UDP packet.

• CWE-399

• http://nwtime.org/ntp428p9_release/Release Notes, Vendor Advisory
• http://support.ntp.org/bin/view/Main/NtpBug3110Issue Tracking, Mitigation, Vendor Advisory
• http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_VulnerabilitiesVendor Advisory
• http://www.securityfocus.com/bid/94450Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037354
• https://bto.bluecoat.com/security-advisory/sa139
• https://www.kb.cert.org/vuls/id/633847Third Party Advisory, US Government Resource
• http://nwtime.org/ntp428p9_release/Release Notes, Vendor Advisory
• http://support.ntp.org/bin/view/Main/NtpBug3110Issue Tracking, Mitigation, Vendor Advisory
• http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_VulnerabilitiesVendor Advisory
• http://www.securityfocus.com/bid/94450Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037354
• https://bto.bluecoat.com/security-advisory/sa139
• https://www.kb.cert.org/vuls/id/633847Third Party Advisory, US Government Resource

Published

Jan 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9304Multiple buffer overflows in the Autodesk FBX-SDK before 201…
• CVE-2016-9305Improper handling in the Autodesk FBX-SDK before 2017.1 of t…
• CVE-2016-9306Multiple buffer overflows in the Autodesk FBX-SDK before 201…
• CVE-2016-9307Multiple buffer overflows in the Autodesk FBX-SDK before 201…
• CVE-2016-9310The control mode (mode 6) functionality in ntpd in NTP befor…
• CVE-2016-9311ntpd in NTP before 4.2.8p9, when the trap service is enabled…
• CVE-2016-9313security/keys/big_key.c in the Linux kernel before 4.8.7 mis…7.8
• CVE-2016-9314Sensitive Information Disclosure in com.trend.iwss.gui.servl…
• CVE-2016-9315Privilege Escalation Vulnerability in com.trend.iwss.gui.ser…
• CVE-2016-9316Multiple stored Cross-Site-Scripting (XSS) vulnerabilities i…
• CVE-2016-9317The gdImageCreate function in the GD Graphics Library (aka l…
• CVE-2016-9318libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earl…5.5