CVE-2017-6451

The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.

• CWE-787

• http://support.ntp.org/bin/view/Main/NtpBug3378Patch, Vendor Advisory
• http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_SecuVendor Advisory
• http://www.securityfocus.com/bid/97058Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038123Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039427
• https://support.apple.com/HT208144
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
• http://support.ntp.org/bin/view/Main/NtpBug3378Patch, Vendor Advisory
• http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_SecuVendor Advisory
• http://www.securityfocus.com/bid/97058Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038123Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039427
• https://support.apple.com/HT208144
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us

Published

Mar 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6441The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7…
• CVE-2017-6443Cross-site scripting (XSS) vulnerability in EPSON TMNet WebC…
• CVE-2017-6444The MikroTik Router hAP Lite 6.25 has no protection mechanis…7.5
• CVE-2017-6445The auto-update feature of Open Embedded Linux Entertainment…
• CVE-2017-6446XSS was discovered in Dotclear v2.11.2, affecting admin/blog…
• CVE-2017-6448The dalvik_disassemble function in libr/asm/p/asm_dalvik.c i…
• CVE-2017-6452Stack-based buffer overflow in the Windows installer for NTP…
• CVE-2017-6453Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-6454Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-6455NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSA…
• CVE-2017-6456Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-6457Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…