CVE-2009-1252

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 21.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-05-19 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.

Affected products

NTP: 4.2.4p0, 4.2.4p1, 4.2.4p2, 4.2.4p3, 4.2.4p4, 4.2.4p5 (+72)

References

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
http://rhn.redhat.com/errata/RHSA-2009-1039.html
http://rhn.redhat.com/errata/RHSA-2009-1040.html
http://secunia.com/advisories/35137
http://secunia.com/advisories/35138
http://secunia.com/advisories/35166
http://secunia.com/advisories/35169
http://secunia.com/advisories/35243
http://secunia.com/advisories/35253
http://secunia.com/advisories/35308
http://secunia.com/advisories/35336

Get alerted when CVE-2009-1252 or the next vulnerability affects your stack