Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
Typedeb
Namespacedebian
Namentpsec
Version1.2.3+dfsg1-8
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.2.4+dfsg-1
Latest_non_vulnerable_version1.2.4+dfsg-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-228e-w91v-97hq
vulnerability_id VCID-228e-w91v-97hq
summary ntp: ntpd allows remote attackers to prevent a broadcast client from synchronizing its clock
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8956.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8956.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-8956
reference_id
reference_type
scores
0
value 0.01954
scoring_system epss
scoring_elements 0.83411
published_at 2026-04-01T12:55:00Z
1
value 0.01954
scoring_system epss
scoring_elements 0.83627
published_at 2026-05-12T12:55:00Z
2
value 0.01954
scoring_system epss
scoring_elements 0.8361
published_at 2026-05-09T12:55:00Z
3
value 0.01954
scoring_system epss
scoring_elements 0.83611
published_at 2026-05-11T12:55:00Z
4
value 0.01954
scoring_system epss
scoring_elements 0.83424
published_at 2026-04-02T12:55:00Z
5
value 0.01954
scoring_system epss
scoring_elements 0.83438
published_at 2026-04-04T12:55:00Z
6
value 0.01954
scoring_system epss
scoring_elements 0.83437
published_at 2026-04-07T12:55:00Z
7
value 0.01954
scoring_system epss
scoring_elements 0.83462
published_at 2026-04-08T12:55:00Z
8
value 0.01954
scoring_system epss
scoring_elements 0.83471
published_at 2026-04-09T12:55:00Z
9
value 0.01954
scoring_system epss
scoring_elements 0.83486
published_at 2026-04-11T12:55:00Z
10
value 0.01954
scoring_system epss
scoring_elements 0.8348
published_at 2026-04-12T12:55:00Z
11
value 0.01954
scoring_system epss
scoring_elements 0.83476
published_at 2026-04-13T12:55:00Z
12
value 0.01954
scoring_system epss
scoring_elements 0.83512
published_at 2026-04-16T12:55:00Z
13
value 0.01954
scoring_system epss
scoring_elements 0.83513
published_at 2026-04-18T12:55:00Z
14
value 0.01954
scoring_system epss
scoring_elements 0.83514
published_at 2026-04-21T12:55:00Z
15
value 0.01954
scoring_system epss
scoring_elements 0.83537
published_at 2026-04-24T12:55:00Z
16
value 0.01954
scoring_system epss
scoring_elements 0.83544
published_at 2026-04-26T12:55:00Z
17
value 0.01954
scoring_system epss
scoring_elements 0.83546
published_at 2026-04-29T12:55:00Z
18
value 0.01954
scoring_system epss
scoring_elements 0.83571
published_at 2026-05-05T12:55:00Z
19
value 0.01954
scoring_system epss
scoring_elements 0.83592
published_at 2026-05-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-8956
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8956
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8956
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1848589
reference_id 1848589
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1848589
5
reference_url https://security.archlinux.org/AVG-1151
reference_id AVG-1151
reference_type
scores
0
value Low
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1151
fixed_packages
0
url pkg:deb/debian/ntpsec@0?distro=trixie
purl pkg:deb/debian/ntpsec@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@0%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
4
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2018-8956
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-228e-w91v-97hq
1
url VCID-2536-ky83-bfec
vulnerability_id VCID-2536-ky83-bfec
summary
Multiple vulnerabilities have been found in NTP, the worst of which
    could lead to remote code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7170.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7170.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-7170
reference_id
reference_type
scores
0
value 0.00536
scoring_system epss
scoring_elements 0.67402
published_at 2026-04-01T12:55:00Z
1
value 0.00536
scoring_system epss
scoring_elements 0.67591
published_at 2026-05-12T12:55:00Z
2
value 0.00536
scoring_system epss
scoring_elements 0.67594
published_at 2026-05-09T12:55:00Z
3
value 0.00536
scoring_system epss
scoring_elements 0.67567
published_at 2026-05-11T12:55:00Z
4
value 0.00536
scoring_system epss
scoring_elements 0.67438
published_at 2026-04-02T12:55:00Z
5
value 0.00536
scoring_system epss
scoring_elements 0.67459
published_at 2026-04-04T12:55:00Z
6
value 0.00536
scoring_system epss
scoring_elements 0.67439
published_at 2026-04-07T12:55:00Z
7
value 0.00536
scoring_system epss
scoring_elements 0.6749
published_at 2026-04-08T12:55:00Z
8
value 0.00536
scoring_system epss
scoring_elements 0.67504
published_at 2026-04-09T12:55:00Z
9
value 0.00536
scoring_system epss
scoring_elements 0.67527
published_at 2026-04-11T12:55:00Z
10
value 0.00536
scoring_system epss
scoring_elements 0.67514
published_at 2026-04-12T12:55:00Z
11
value 0.00536
scoring_system epss
scoring_elements 0.6748
published_at 2026-04-13T12:55:00Z
12
value 0.00536
scoring_system epss
scoring_elements 0.67516
published_at 2026-04-16T12:55:00Z
13
value 0.00536
scoring_system epss
scoring_elements 0.67529
published_at 2026-04-18T12:55:00Z
14
value 0.00536
scoring_system epss
scoring_elements 0.67508
published_at 2026-04-21T12:55:00Z
15
value 0.00536
scoring_system epss
scoring_elements 0.67528
published_at 2026-04-24T12:55:00Z
16
value 0.00536
scoring_system epss
scoring_elements 0.67538
published_at 2026-04-26T12:55:00Z
17
value 0.00536
scoring_system epss
scoring_elements 0.67539
published_at 2026-04-29T12:55:00Z
18
value 0.00536
scoring_system epss
scoring_elements 0.67513
published_at 2026-05-05T12:55:00Z
19
value 0.00536
scoring_system epss
scoring_elements 0.67556
published_at 2026-05-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-7170
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7170
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7170
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1550214
reference_id 1550214
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1550214
5
reference_url https://security.archlinux.org/ASA-201803-11
reference_id ASA-201803-11
reference_type
scores
url https://security.archlinux.org/ASA-201803-11
6
reference_url https://security.archlinux.org/AVG-647
reference_id AVG-647
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-647
7
reference_url https://security.gentoo.org/glsa/201805-12
reference_id GLSA-201805-12
reference_type
scores
url https://security.gentoo.org/glsa/201805-12
fixed_packages
0
url pkg:deb/debian/ntpsec@0?distro=trixie
purl pkg:deb/debian/ntpsec@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@0%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
4
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2018-7170
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2536-ky83-bfec
2
url VCID-278f-qdgu-2bbe
vulnerability_id VCID-278f-qdgu-2bbe
summary ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '#' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the '#'. This results in the administrator not being able to use the keys as expected or the keys are shorter than expected and easier to brute-force, possibly resulting in MITM attacks between ntp clients and ntp servers. For short AES128 keys, ntpd generates a warning that it is padding them.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22212
reference_id
reference_type
scores
0
value 0.00133
scoring_system epss
scoring_elements 0.32814
published_at 2026-04-01T12:55:00Z
1
value 0.00133
scoring_system epss
scoring_elements 0.32944
published_at 2026-04-02T12:55:00Z
2
value 0.00133
scoring_system epss
scoring_elements 0.32979
published_at 2026-04-04T12:55:00Z
3
value 0.00133
scoring_system epss
scoring_elements 0.32803
published_at 2026-04-07T12:55:00Z
4
value 0.00133
scoring_system epss
scoring_elements 0.3285
published_at 2026-04-08T12:55:00Z
5
value 0.00133
scoring_system epss
scoring_elements 0.32879
published_at 2026-04-09T12:55:00Z
6
value 0.00133
scoring_system epss
scoring_elements 0.32881
published_at 2026-04-11T12:55:00Z
7
value 0.00133
scoring_system epss
scoring_elements 0.32842
published_at 2026-04-12T12:55:00Z
8
value 0.00133
scoring_system epss
scoring_elements 0.32817
published_at 2026-04-13T12:55:00Z
9
value 0.00133
scoring_system epss
scoring_elements 0.32859
published_at 2026-04-16T12:55:00Z
10
value 0.00133
scoring_system epss
scoring_elements 0.32836
published_at 2026-04-18T12:55:00Z
11
value 0.00133
scoring_system epss
scoring_elements 0.328
published_at 2026-04-21T12:55:00Z
12
value 0.00133
scoring_system epss
scoring_elements 0.32649
published_at 2026-04-24T12:55:00Z
13
value 0.00133
scoring_system epss
scoring_elements 0.32534
published_at 2026-04-26T12:55:00Z
14
value 0.00133
scoring_system epss
scoring_elements 0.32451
published_at 2026-04-29T12:55:00Z
15
value 0.00139
scoring_system epss
scoring_elements 0.33375
published_at 2026-05-05T12:55:00Z
16
value 0.00139
scoring_system epss
scoring_elements 0.33443
published_at 2026-05-07T12:55:00Z
17
value 0.00139
scoring_system epss
scoring_elements 0.33484
published_at 2026-05-09T12:55:00Z
18
value 0.00139
scoring_system epss
scoring_elements 0.33397
published_at 2026-05-11T12:55:00Z
19
value 0.00139
scoring_system epss
scoring_elements 0.3342
published_at 2026-05-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22212
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22212
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22212
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989847
reference_id 989847
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989847
fixed_packages
0
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2021-22212
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-278f-qdgu-2bbe
3
url VCID-8gnm-nqcy-87b3
vulnerability_id VCID-8gnm-nqcy-87b3
summary
Multiple vulnerabilities have been found in NTP, the worst of which
    could lead to remote code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7182.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7182.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-7182
reference_id
reference_type
scores
0
value 0.11077
scoring_system epss
scoring_elements 0.93519
published_at 2026-05-12T12:55:00Z
1
value 0.11077
scoring_system epss
scoring_elements 0.93451
published_at 2026-04-13T12:55:00Z
2
value 0.11077
scoring_system epss
scoring_elements 0.9347
published_at 2026-04-16T12:55:00Z
3
value 0.11077
scoring_system epss
scoring_elements 0.93475
published_at 2026-04-18T12:55:00Z
4
value 0.11077
scoring_system epss
scoring_elements 0.93481
published_at 2026-04-29T12:55:00Z
5
value 0.11077
scoring_system epss
scoring_elements 0.93484
published_at 2026-04-24T12:55:00Z
6
value 0.11077
scoring_system epss
scoring_elements 0.93488
published_at 2026-05-05T12:55:00Z
7
value 0.11077
scoring_system epss
scoring_elements 0.93502
published_at 2026-05-07T12:55:00Z
8
value 0.11077
scoring_system epss
scoring_elements 0.93513
published_at 2026-05-11T12:55:00Z
9
value 0.14259
scoring_system epss
scoring_elements 0.94395
published_at 2026-04-11T12:55:00Z
10
value 0.14259
scoring_system epss
scoring_elements 0.94359
published_at 2026-04-01T12:55:00Z
11
value 0.14259
scoring_system epss
scoring_elements 0.94392
published_at 2026-04-09T12:55:00Z
12
value 0.14259
scoring_system epss
scoring_elements 0.94396
published_at 2026-04-12T12:55:00Z
13
value 0.14259
scoring_system epss
scoring_elements 0.94368
published_at 2026-04-02T12:55:00Z
14
value 0.14259
scoring_system epss
scoring_elements 0.94378
published_at 2026-04-04T12:55:00Z
15
value 0.14259
scoring_system epss
scoring_elements 0.94379
published_at 2026-04-07T12:55:00Z
16
value 0.14259
scoring_system epss
scoring_elements 0.94388
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-7182
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7182
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7182
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1550208
reference_id 1550208
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1550208
5
reference_url https://security.archlinux.org/ASA-201803-11
reference_id ASA-201803-11
reference_type
scores
url https://security.archlinux.org/ASA-201803-11
6
reference_url https://security.archlinux.org/AVG-647
reference_id AVG-647
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-647
7
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/45846.py
reference_id CVE-2018-7182
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/45846.py
8
reference_url https://security.gentoo.org/glsa/201805-12
reference_id GLSA-201805-12
reference_type
scores
url https://security.gentoo.org/glsa/201805-12
9
reference_url https://usn.ubuntu.com/3707-1/
reference_id USN-3707-1
reference_type
scores
url https://usn.ubuntu.com/3707-1/
fixed_packages
0
url pkg:deb/debian/ntpsec@1.0.0%2Bdfsg1-5?distro=trixie
purl pkg:deb/debian/ntpsec@1.0.0%2Bdfsg1-5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.0.0%252Bdfsg1-5%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
4
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2018-7182
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8gnm-nqcy-87b3
4
url VCID-d27b-a6y5-ybfw
vulnerability_id VCID-d27b-a6y5-ybfw
summary An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-6443
reference_id
reference_type
scores
0
value 0.43948
scoring_system epss
scoring_elements 0.9757
published_at 2026-05-12T12:55:00Z
1
value 0.43948
scoring_system epss
scoring_elements 0.97564
published_at 2026-05-11T12:55:00Z
2
value 0.43948
scoring_system epss
scoring_elements 0.97511
published_at 2026-04-01T12:55:00Z
3
value 0.43948
scoring_system epss
scoring_elements 0.97518
published_at 2026-04-02T12:55:00Z
4
value 0.43948
scoring_system epss
scoring_elements 0.9752
published_at 2026-04-04T12:55:00Z
5
value 0.43948
scoring_system epss
scoring_elements 0.97522
published_at 2026-04-07T12:55:00Z
6
value 0.43948
scoring_system epss
scoring_elements 0.97528
published_at 2026-04-08T12:55:00Z
7
value 0.43948
scoring_system epss
scoring_elements 0.97529
published_at 2026-04-09T12:55:00Z
8
value 0.43948
scoring_system epss
scoring_elements 0.97533
published_at 2026-04-11T12:55:00Z
9
value 0.43948
scoring_system epss
scoring_elements 0.97535
published_at 2026-04-13T12:55:00Z
10
value 0.43948
scoring_system epss
scoring_elements 0.97544
published_at 2026-04-16T12:55:00Z
11
value 0.43948
scoring_system epss
scoring_elements 0.97545
published_at 2026-04-18T12:55:00Z
12
value 0.43948
scoring_system epss
scoring_elements 0.97547
published_at 2026-04-21T12:55:00Z
13
value 0.43948
scoring_system epss
scoring_elements 0.97546
published_at 2026-04-26T12:55:00Z
14
value 0.43948
scoring_system epss
scoring_elements 0.97549
published_at 2026-04-29T12:55:00Z
15
value 0.43948
scoring_system epss
scoring_elements 0.97556
published_at 2026-05-05T12:55:00Z
16
value 0.43948
scoring_system epss
scoring_elements 0.97559
published_at 2026-05-07T12:55:00Z
17
value 0.43948
scoring_system epss
scoring_elements 0.97563
published_at 2026-05-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-6443
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6443
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6443
2
reference_url https://dumpco.re/blog/ntpsec-bugs
reference_id
reference_type
scores
url https://dumpco.re/blog/ntpsec-bugs
3
reference_url https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
reference_id
reference_type
scores
url https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
4
reference_url https://www.exploit-db.com/exploits/46175/
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/46175/
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919513
reference_id 919513
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919513
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*
7
reference_url https://dumpco.re/bugs/ntpsec-oobread1
reference_id CVE-2019-6443
reference_type exploit
scores
url https://dumpco.re/bugs/ntpsec-oobread1
8
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/46175.py
reference_id CVE-2019-6443
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/46175.py
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-6443
reference_id CVE-2019-6443
reference_type
scores
0
value 6.4
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:P
1
value 9.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2019-6443
fixed_packages
0
url pkg:deb/debian/ntpsec@1.1.3%2Bdfsg1-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.1.3%2Bdfsg1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.1.3%252Bdfsg1-1%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
4
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2019-6443
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d27b-a6y5-ybfw
5
url VCID-eg5y-5x2g-duf9
vulnerability_id VCID-eg5y-5x2g-duf9
summary
Multiple vulnerabilities have been found in NTP, the worst of which
    could result in a Denial of Service condition.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15025.json
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15025.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-15025
reference_id
reference_type
scores
0
value 0.03115
scoring_system epss
scoring_elements 0.8677
published_at 2026-04-01T12:55:00Z
1
value 0.03115
scoring_system epss
scoring_elements 0.86781
published_at 2026-04-02T12:55:00Z
2
value 0.03115
scoring_system epss
scoring_elements 0.868
published_at 2026-04-04T12:55:00Z
3
value 0.03115
scoring_system epss
scoring_elements 0.86798
published_at 2026-04-07T12:55:00Z
4
value 0.03115
scoring_system epss
scoring_elements 0.86817
published_at 2026-04-08T12:55:00Z
5
value 0.03115
scoring_system epss
scoring_elements 0.86826
published_at 2026-04-09T12:55:00Z
6
value 0.03115
scoring_system epss
scoring_elements 0.86839
published_at 2026-04-11T12:55:00Z
7
value 0.03115
scoring_system epss
scoring_elements 0.86835
published_at 2026-04-12T12:55:00Z
8
value 0.03115
scoring_system epss
scoring_elements 0.86831
published_at 2026-04-13T12:55:00Z
9
value 0.03115
scoring_system epss
scoring_elements 0.86848
published_at 2026-04-16T12:55:00Z
10
value 0.03115
scoring_system epss
scoring_elements 0.86852
published_at 2026-04-21T12:55:00Z
11
value 0.03115
scoring_system epss
scoring_elements 0.86868
published_at 2026-04-24T12:55:00Z
12
value 0.03115
scoring_system epss
scoring_elements 0.86875
published_at 2026-04-26T12:55:00Z
13
value 0.03115
scoring_system epss
scoring_elements 0.86876
published_at 2026-04-29T12:55:00Z
14
value 0.03115
scoring_system epss
scoring_elements 0.86898
published_at 2026-05-05T12:55:00Z
15
value 0.03115
scoring_system epss
scoring_elements 0.86917
published_at 2026-05-07T12:55:00Z
16
value 0.03115
scoring_system epss
scoring_elements 0.86935
published_at 2026-05-09T12:55:00Z
17
value 0.03115
scoring_system epss
scoring_elements 0.86931
published_at 2026-05-11T12:55:00Z
18
value 0.03115
scoring_system epss
scoring_elements 0.86944
published_at 2026-05-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-15025
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15025
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15025
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1850530
reference_id 1850530
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1850530
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=963807
reference_id 963807
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=963807
6
reference_url https://security.gentoo.org/glsa/202007-12
reference_id GLSA-202007-12
reference_type
scores
url https://security.gentoo.org/glsa/202007-12
7
reference_url https://usn.ubuntu.com/USN-5175-1/
reference_id USN-USN-5175-1
reference_type
scores
url https://usn.ubuntu.com/USN-5175-1/
fixed_packages
0
url pkg:deb/debian/ntpsec@0?distro=trixie
purl pkg:deb/debian/ntpsec@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@0%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
4
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2020-15025
risk_score 2.0
exploitability 0.5
weighted_severity 4.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eg5y-5x2g-duf9
6
url VCID-ffw3-6y9s-wycc
vulnerability_id VCID-ffw3-6y9s-wycc
summary
Multiple vulnerabilities have been found in NTP, the worst of which
    could lead to remote code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7184.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7184.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-7184
reference_id
reference_type
scores
0
value 0.13128
scoring_system epss
scoring_elements 0.94077
published_at 2026-04-01T12:55:00Z
1
value 0.13128
scoring_system epss
scoring_elements 0.9418
published_at 2026-05-12T12:55:00Z
2
value 0.13128
scoring_system epss
scoring_elements 0.94171
published_at 2026-05-09T12:55:00Z
3
value 0.13128
scoring_system epss
scoring_elements 0.94176
published_at 2026-05-11T12:55:00Z
4
value 0.13128
scoring_system epss
scoring_elements 0.94087
published_at 2026-04-02T12:55:00Z
5
value 0.13128
scoring_system epss
scoring_elements 0.94098
published_at 2026-04-04T12:55:00Z
6
value 0.13128
scoring_system epss
scoring_elements 0.94101
published_at 2026-04-07T12:55:00Z
7
value 0.13128
scoring_system epss
scoring_elements 0.9411
published_at 2026-04-08T12:55:00Z
8
value 0.13128
scoring_system epss
scoring_elements 0.94114
published_at 2026-04-09T12:55:00Z
9
value 0.13128
scoring_system epss
scoring_elements 0.94119
published_at 2026-04-13T12:55:00Z
10
value 0.13128
scoring_system epss
scoring_elements 0.94136
published_at 2026-04-16T12:55:00Z
11
value 0.13128
scoring_system epss
scoring_elements 0.9414
published_at 2026-04-21T12:55:00Z
12
value 0.13128
scoring_system epss
scoring_elements 0.94142
published_at 2026-04-24T12:55:00Z
13
value 0.13128
scoring_system epss
scoring_elements 0.94143
published_at 2026-04-29T12:55:00Z
14
value 0.13128
scoring_system epss
scoring_elements 0.94147
published_at 2026-05-05T12:55:00Z
15
value 0.13128
scoring_system epss
scoring_elements 0.94159
published_at 2026-05-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-7184
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7184
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7184
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1550218
reference_id 1550218
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1550218
5
reference_url https://security.archlinux.org/ASA-201803-11
reference_id ASA-201803-11
reference_type
scores
url https://security.archlinux.org/ASA-201803-11
6
reference_url https://security.archlinux.org/AVG-647
reference_id AVG-647
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-647
7
reference_url https://security.gentoo.org/glsa/201805-12
reference_id GLSA-201805-12
reference_type
scores
url https://security.gentoo.org/glsa/201805-12
8
reference_url https://usn.ubuntu.com/3707-1/
reference_id USN-3707-1
reference_type
scores
url https://usn.ubuntu.com/3707-1/
fixed_packages
0
url pkg:deb/debian/ntpsec@0?distro=trixie
purl pkg:deb/debian/ntpsec@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@0%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
4
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2018-7184
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ffw3-6y9s-wycc
7
url VCID-k2y6-z11d-tqek
vulnerability_id VCID-k2y6-z11d-tqek
summary
Multiple vulnerabilities have been found in NTP, the worst of which
    could result in a Denial of Service condition.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13817.json
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13817.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-13817
reference_id
reference_type
scores
0
value 0.00348
scoring_system epss
scoring_elements 0.57342
published_at 2026-05-12T12:55:00Z
1
value 0.00348
scoring_system epss
scoring_elements 0.57243
published_at 2026-04-01T12:55:00Z
2
value 0.00348
scoring_system epss
scoring_elements 0.57325
published_at 2026-04-07T12:55:00Z
3
value 0.00348
scoring_system epss
scoring_elements 0.57349
published_at 2026-04-04T12:55:00Z
4
value 0.00348
scoring_system epss
scoring_elements 0.57376
published_at 2026-04-08T12:55:00Z
5
value 0.00348
scoring_system epss
scoring_elements 0.57378
published_at 2026-04-09T12:55:00Z
6
value 0.00348
scoring_system epss
scoring_elements 0.57393
published_at 2026-04-11T12:55:00Z
7
value 0.00348
scoring_system epss
scoring_elements 0.57373
published_at 2026-04-12T12:55:00Z
8
value 0.00348
scoring_system epss
scoring_elements 0.57353
published_at 2026-04-13T12:55:00Z
9
value 0.00348
scoring_system epss
scoring_elements 0.57379
published_at 2026-04-16T12:55:00Z
10
value 0.00348
scoring_system epss
scoring_elements 0.57374
published_at 2026-04-18T12:55:00Z
11
value 0.00348
scoring_system epss
scoring_elements 0.57352
published_at 2026-04-21T12:55:00Z
12
value 0.00348
scoring_system epss
scoring_elements 0.57309
published_at 2026-04-24T12:55:00Z
13
value 0.00348
scoring_system epss
scoring_elements 0.57331
published_at 2026-04-26T12:55:00Z
14
value 0.00348
scoring_system epss
scoring_elements 0.57312
published_at 2026-04-29T12:55:00Z
15
value 0.00348
scoring_system epss
scoring_elements 0.57261
published_at 2026-05-05T12:55:00Z
16
value 0.00348
scoring_system epss
scoring_elements 0.57305
published_at 2026-05-07T12:55:00Z
17
value 0.00348
scoring_system epss
scoring_elements 0.57367
published_at 2026-05-09T12:55:00Z
18
value 0.00348
scoring_system epss
scoring_elements 0.57317
published_at 2026-05-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-13817
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13817
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13817
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1811627
reference_id 1811627
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1811627
5
reference_url https://security.gentoo.org/glsa/202007-12
reference_id GLSA-202007-12
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
1
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:13:39Z/
url https://security.gentoo.org/glsa/202007-12
6
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00005.html
reference_id msg00005.html
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
1
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:13:39Z/
url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00005.html
7
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00044.html
reference_id msg00044.html
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
1
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:13:39Z/
url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00044.html
8
reference_url https://security.netapp.com/advisory/ntap-20200625-0004/
reference_id ntap-20200625-0004
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
1
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:13:39Z/
url https://security.netapp.com/advisory/ntap-20200625-0004/
9
reference_url http://support.ntp.org/bin/view/Main/NtpBug3596
reference_id NtpBug3596
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
1
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:13:39Z/
url http://support.ntp.org/bin/view/Main/NtpBug3596
10
reference_url https://access.redhat.com/errata/RHSA-2020:2663
reference_id RHSA-2020:2663
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2663
11
reference_url https://bugs.ntp.org/show_bug.cgi?id=3596
reference_id show_bug.cgi?id=3596
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
1
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:13:39Z/
url https://bugs.ntp.org/show_bug.cgi?id=3596
fixed_packages
0
url pkg:deb/debian/ntpsec@0?distro=trixie
purl pkg:deb/debian/ntpsec@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@0%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
4
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2020-13817
risk_score 3.4
exploitability 0.5
weighted_severity 6.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k2y6-z11d-tqek
8
url VCID-m43s-jr35-b7hx
vulnerability_id VCID-m43s-jr35-b7hx
summary ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3).
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-4012
reference_id
reference_type
scores
0
value 0.002
scoring_system epss
scoring_elements 0.41784
published_at 2026-05-11T12:55:00Z
1
value 0.002
scoring_system epss
scoring_elements 0.4187
published_at 2026-05-09T12:55:00Z
2
value 0.002
scoring_system epss
scoring_elements 0.41853
published_at 2026-05-07T12:55:00Z
3
value 0.002
scoring_system epss
scoring_elements 0.41809
published_at 2026-05-12T12:55:00Z
4
value 0.002
scoring_system epss
scoring_elements 0.41785
published_at 2026-05-05T12:55:00Z
5
value 0.0023
scoring_system epss
scoring_elements 0.45791
published_at 2026-04-11T12:55:00Z
6
value 0.0023
scoring_system epss
scoring_elements 0.45761
published_at 2026-04-12T12:55:00Z
7
value 0.0023
scoring_system epss
scoring_elements 0.45743
published_at 2026-04-02T12:55:00Z
8
value 0.0023
scoring_system epss
scoring_elements 0.45817
published_at 2026-04-16T12:55:00Z
9
value 0.0023
scoring_system epss
scoring_elements 0.45812
published_at 2026-04-18T12:55:00Z
10
value 0.0023
scoring_system epss
scoring_elements 0.45758
published_at 2026-04-21T12:55:00Z
11
value 0.0023
scoring_system epss
scoring_elements 0.45689
published_at 2026-04-24T12:55:00Z
12
value 0.0023
scoring_system epss
scoring_elements 0.457
published_at 2026-04-26T12:55:00Z
13
value 0.0023
scoring_system epss
scoring_elements 0.45639
published_at 2026-04-29T12:55:00Z
14
value 0.0023
scoring_system epss
scoring_elements 0.45767
published_at 2026-04-13T12:55:00Z
15
value 0.0023
scoring_system epss
scoring_elements 0.45765
published_at 2026-04-04T12:55:00Z
16
value 0.0023
scoring_system epss
scoring_elements 0.45715
published_at 2026-04-07T12:55:00Z
17
value 0.0023
scoring_system epss
scoring_elements 0.45772
published_at 2026-04-08T12:55:00Z
18
value 0.0023
scoring_system epss
scoring_elements 0.45768
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-4012
1
reference_url https://gitlab.com/NTPsec/ntpsec/-/issues/794
reference_id 794
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-30T15:47:43Z/
url https://gitlab.com/NTPsec/ntpsec/-/issues/794
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038422
reference_id bugreport.cgi?bug=1038422
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-30T15:47:43Z/
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038422
fixed_packages
0
url pkg:deb/debian/ntpsec@0?distro=trixie
purl pkg:deb/debian/ntpsec@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@0%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-2?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-2%3Fdistro=trixie
4
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
5
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2023-4012
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m43s-jr35-b7hx
9
url VCID-qpfz-2p88-w7gr
vulnerability_id VCID-qpfz-2p88-w7gr
summary An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl() in ntpd.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-6444
reference_id
reference_type
scores
0
value 0.12577
scoring_system epss
scoring_elements 0.94013
published_at 2026-05-12T12:55:00Z
1
value 0.12577
scoring_system epss
scoring_elements 0.94009
published_at 2026-05-11T12:55:00Z
2
value 0.12577
scoring_system epss
scoring_elements 0.93914
published_at 2026-04-01T12:55:00Z
3
value 0.12577
scoring_system epss
scoring_elements 0.93923
published_at 2026-04-02T12:55:00Z
4
value 0.12577
scoring_system epss
scoring_elements 0.93931
published_at 2026-04-04T12:55:00Z
5
value 0.12577
scoring_system epss
scoring_elements 0.93935
published_at 2026-04-07T12:55:00Z
6
value 0.12577
scoring_system epss
scoring_elements 0.93944
published_at 2026-04-08T12:55:00Z
7
value 0.12577
scoring_system epss
scoring_elements 0.93947
published_at 2026-04-09T12:55:00Z
8
value 0.12577
scoring_system epss
scoring_elements 0.9395
published_at 2026-04-13T12:55:00Z
9
value 0.12577
scoring_system epss
scoring_elements 0.93966
published_at 2026-04-16T12:55:00Z
10
value 0.12577
scoring_system epss
scoring_elements 0.93972
published_at 2026-04-18T12:55:00Z
11
value 0.12577
scoring_system epss
scoring_elements 0.93973
published_at 2026-04-21T12:55:00Z
12
value 0.12577
scoring_system epss
scoring_elements 0.93975
published_at 2026-04-24T12:55:00Z
13
value 0.12577
scoring_system epss
scoring_elements 0.93974
published_at 2026-04-29T12:55:00Z
14
value 0.12577
scoring_system epss
scoring_elements 0.93983
published_at 2026-05-05T12:55:00Z
15
value 0.12577
scoring_system epss
scoring_elements 0.93995
published_at 2026-05-07T12:55:00Z
16
value 0.12577
scoring_system epss
scoring_elements 0.94004
published_at 2026-05-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-6444
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6444
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6444
2
reference_url https://dumpco.re/blog/ntpsec-bugs
reference_id
reference_type
scores
url https://dumpco.re/blog/ntpsec-bugs
3
reference_url https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
reference_id
reference_type
scores
url https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
4
reference_url https://www.exploit-db.com/exploits/46176/
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/46176/
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919513
reference_id 919513
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919513
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*
7
reference_url https://dumpco.re/bugs/ntpsec-oobread2
reference_id CVE-2019-6444
reference_type exploit
scores
url https://dumpco.re/bugs/ntpsec-oobread2
8
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/46176.py
reference_id CVE-2019-6444
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/46176.py
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-6444
reference_id CVE-2019-6444
reference_type
scores
0
value 6.4
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:P
1
value 9.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2019-6444
fixed_packages
0
url pkg:deb/debian/ntpsec@1.1.3%2Bdfsg1-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.1.3%2Bdfsg1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.1.3%252Bdfsg1-1%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
4
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2019-6444
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qpfz-2p88-w7gr
10
url VCID-qxzt-6usv-2ufh
vulnerability_id VCID-qxzt-6usv-2ufh
summary
Multiple vulnerabilities have been found in NTP, the worst of which
    could result in a Denial of Service condition.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11868.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11868.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-11868
reference_id
reference_type
scores
0
value 0.0112
scoring_system epss
scoring_elements 0.78306
published_at 2026-04-26T12:55:00Z
1
value 0.0112
scoring_system epss
scoring_elements 0.783
published_at 2026-04-24T12:55:00Z
2
value 0.01301
scoring_system epss
scoring_elements 0.7971
published_at 2026-04-04T12:55:00Z
3
value 0.01301
scoring_system epss
scoring_elements 0.79681
published_at 2026-04-01T12:55:00Z
4
value 0.01301
scoring_system epss
scoring_elements 0.79688
published_at 2026-04-02T12:55:00Z
5
value 0.01301
scoring_system epss
scoring_elements 0.79758
published_at 2026-04-16T12:55:00Z
6
value 0.01301
scoring_system epss
scoring_elements 0.7973
published_at 2026-04-13T12:55:00Z
7
value 0.01301
scoring_system epss
scoring_elements 0.79736
published_at 2026-04-12T12:55:00Z
8
value 0.01301
scoring_system epss
scoring_elements 0.79752
published_at 2026-04-11T12:55:00Z
9
value 0.01301
scoring_system epss
scoring_elements 0.79731
published_at 2026-04-09T12:55:00Z
10
value 0.01301
scoring_system epss
scoring_elements 0.79723
published_at 2026-04-08T12:55:00Z
11
value 0.01301
scoring_system epss
scoring_elements 0.79695
published_at 2026-04-07T12:55:00Z
12
value 0.01301
scoring_system epss
scoring_elements 0.79763
published_at 2026-04-21T12:55:00Z
13
value 0.01301
scoring_system epss
scoring_elements 0.79759
published_at 2026-04-18T12:55:00Z
14
value 0.01337
scoring_system epss
scoring_elements 0.80108
published_at 2026-05-07T12:55:00Z
15
value 0.01337
scoring_system epss
scoring_elements 0.80123
published_at 2026-05-09T12:55:00Z
16
value 0.01337
scoring_system epss
scoring_elements 0.80085
published_at 2026-05-05T12:55:00Z
17
value 0.01337
scoring_system epss
scoring_elements 0.80072
published_at 2026-04-29T12:55:00Z
18
value 0.01497
scoring_system epss
scoring_elements 0.8124
published_at 2026-05-11T12:55:00Z
19
value 0.01497
scoring_system epss
scoring_elements 0.81258
published_at 2026-05-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-11868
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11868
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11868
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1716665
reference_id 1716665
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:13:41Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=1716665
5
reference_url https://security.gentoo.org/glsa/202007-12
reference_id GLSA-202007-12
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:13:41Z/
url https://security.gentoo.org/glsa/202007-12
6
reference_url https://lists.debian.org/debian-lts-announce/2020/05/msg00004.html
reference_id msg00004.html
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:13:41Z/
url https://lists.debian.org/debian-lts-announce/2020/05/msg00004.html
7
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00005.html
reference_id msg00005.html
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:13:41Z/
url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00005.html
8
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00044.html
reference_id msg00044.html
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:13:41Z/
url http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00044.html
9
reference_url https://security.netapp.com/advisory/ntap-20200424-0002/
reference_id ntap-20200424-0002
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:13:41Z/
url https://security.netapp.com/advisory/ntap-20200424-0002/
10
reference_url http://support.ntp.org/bin/view/Main/NtpBug3592
reference_id NtpBug3592
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:13:41Z/
url http://support.ntp.org/bin/view/Main/NtpBug3592
11
reference_url https://access.redhat.com/errata/RHSA-2020:2663
reference_id RHSA-2020:2663
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2663
fixed_packages
0
url pkg:deb/debian/ntpsec@0?distro=trixie
purl pkg:deb/debian/ntpsec@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@0%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
4
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2020-11868
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qxzt-6usv-2ufh
11
url VCID-tdmu-hs1x-8fhe
vulnerability_id VCID-tdmu-hs1x-8fhe
summary An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a malformed config request, related to config_remotely in ntp_config.c, yyparse in ntp_parser.tab.c, and yyerror in ntp_parser.y.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-6442
reference_id
reference_type
scores
0
value 0.10199
scoring_system epss
scoring_elements 0.93201
published_at 2026-05-12T12:55:00Z
1
value 0.10199
scoring_system epss
scoring_elements 0.93194
published_at 2026-05-11T12:55:00Z
2
value 0.10199
scoring_system epss
scoring_elements 0.93101
published_at 2026-04-01T12:55:00Z
3
value 0.10199
scoring_system epss
scoring_elements 0.93111
published_at 2026-04-02T12:55:00Z
4
value 0.10199
scoring_system epss
scoring_elements 0.93114
published_at 2026-04-04T12:55:00Z
5
value 0.10199
scoring_system epss
scoring_elements 0.93113
published_at 2026-04-07T12:55:00Z
6
value 0.10199
scoring_system epss
scoring_elements 0.93122
published_at 2026-04-08T12:55:00Z
7
value 0.10199
scoring_system epss
scoring_elements 0.93126
published_at 2026-04-09T12:55:00Z
8
value 0.10199
scoring_system epss
scoring_elements 0.93132
published_at 2026-04-11T12:55:00Z
9
value 0.10199
scoring_system epss
scoring_elements 0.93129
published_at 2026-04-12T12:55:00Z
10
value 0.10199
scoring_system epss
scoring_elements 0.93131
published_at 2026-04-13T12:55:00Z
11
value 0.10199
scoring_system epss
scoring_elements 0.93148
published_at 2026-04-16T12:55:00Z
12
value 0.10199
scoring_system epss
scoring_elements 0.93152
published_at 2026-04-18T12:55:00Z
13
value 0.10199
scoring_system epss
scoring_elements 0.9316
published_at 2026-04-21T12:55:00Z
14
value 0.10199
scoring_system epss
scoring_elements 0.93166
published_at 2026-04-24T12:55:00Z
15
value 0.10199
scoring_system epss
scoring_elements 0.93165
published_at 2026-04-26T12:55:00Z
16
value 0.10199
scoring_system epss
scoring_elements 0.93162
published_at 2026-04-29T12:55:00Z
17
value 0.10199
scoring_system epss
scoring_elements 0.93168
published_at 2026-05-05T12:55:00Z
18
value 0.10199
scoring_system epss
scoring_elements 0.93183
published_at 2026-05-07T12:55:00Z
19
value 0.10199
scoring_system epss
scoring_elements 0.93193
published_at 2026-05-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-6442
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6442
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6442
2
reference_url https://dumpco.re/blog/ntpsec-bugs
reference_id
reference_type
scores
url https://dumpco.re/blog/ntpsec-bugs
3
reference_url https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
reference_id
reference_type
scores
url https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
4
reference_url https://www.exploit-db.com/exploits/46178/
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/46178/
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919513
reference_id 919513
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919513
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*
7
reference_url https://dumpco.re/bugs/ntpsec-authed-oobwrite
reference_id CVE-2019-6442
reference_type exploit
scores
url https://dumpco.re/bugs/ntpsec-authed-oobwrite
8
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/46178.py
reference_id CVE-2019-6442
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/46178.py
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-6442
reference_id CVE-2019-6442
reference_type
scores
0
value 4.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:N/I:N/A:P
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2019-6442
fixed_packages
0
url pkg:deb/debian/ntpsec@1.1.3%2Bdfsg1-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.1.3%2Bdfsg1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.1.3%252Bdfsg1-1%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
4
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2019-6442
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tdmu-hs1x-8fhe
12
url VCID-uazs-na27-xqaz
vulnerability_id VCID-uazs-na27-xqaz
summary
Multiple vulnerabilities have been found in NTP, the worst of which
    could lead to remote code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7183.json
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7183.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-7183
reference_id
reference_type
scores
0
value 0.2629
scoring_system epss
scoring_elements 0.96268
published_at 2026-04-01T12:55:00Z
1
value 0.2629
scoring_system epss
scoring_elements 0.96304
published_at 2026-04-12T12:55:00Z
2
value 0.2629
scoring_system epss
scoring_elements 0.96275
published_at 2026-04-02T12:55:00Z
3
value 0.2629
scoring_system epss
scoring_elements 0.96283
published_at 2026-04-04T12:55:00Z
4
value 0.2629
scoring_system epss
scoring_elements 0.96288
published_at 2026-04-07T12:55:00Z
5
value 0.2629
scoring_system epss
scoring_elements 0.963
published_at 2026-04-09T12:55:00Z
6
value 0.2629
scoring_system epss
scoring_elements 0.96297
published_at 2026-04-08T12:55:00Z
7
value 0.32035
scoring_system epss
scoring_elements 0.96861
published_at 2026-05-12T12:55:00Z
8
value 0.32035
scoring_system epss
scoring_elements 0.96853
published_at 2026-05-09T12:55:00Z
9
value 0.32035
scoring_system epss
scoring_elements 0.96855
published_at 2026-05-11T12:55:00Z
10
value 0.32035
scoring_system epss
scoring_elements 0.96818
published_at 2026-04-13T12:55:00Z
11
value 0.32035
scoring_system epss
scoring_elements 0.96824
published_at 2026-04-16T12:55:00Z
12
value 0.32035
scoring_system epss
scoring_elements 0.96828
published_at 2026-04-18T12:55:00Z
13
value 0.32035
scoring_system epss
scoring_elements 0.9683
published_at 2026-04-24T12:55:00Z
14
value 0.32035
scoring_system epss
scoring_elements 0.96832
published_at 2026-04-26T12:55:00Z
15
value 0.32035
scoring_system epss
scoring_elements 0.96835
published_at 2026-04-29T12:55:00Z
16
value 0.32035
scoring_system epss
scoring_elements 0.96843
published_at 2026-05-05T12:55:00Z
17
value 0.32035
scoring_system epss
scoring_elements 0.96847
published_at 2026-05-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-7183
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7183
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7183
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1550223
reference_id 1550223
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1550223
5
reference_url https://security.archlinux.org/ASA-201803-11
reference_id ASA-201803-11
reference_type
scores
url https://security.archlinux.org/ASA-201803-11
6
reference_url https://security.archlinux.org/AVG-647
reference_id AVG-647
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-647
7
reference_url https://security.gentoo.org/glsa/201805-12
reference_id GLSA-201805-12
reference_type
scores
url https://security.gentoo.org/glsa/201805-12
8
reference_url https://usn.ubuntu.com/3707-1/
reference_id USN-3707-1
reference_type
scores
url https://usn.ubuntu.com/3707-1/
9
reference_url https://usn.ubuntu.com/3707-2/
reference_id USN-3707-2
reference_type
scores
url https://usn.ubuntu.com/3707-2/
fixed_packages
0
url pkg:deb/debian/ntpsec@0?distro=trixie
purl pkg:deb/debian/ntpsec@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@0%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
4
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2018-7183
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uazs-na27-xqaz
13
url VCID-upjp-hfwn-hkg5
vulnerability_id VCID-upjp-hfwn-hkg5
summary An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control.c, related to ctl_getitem.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-6445
reference_id
reference_type
scores
0
value 0.06937
scoring_system epss
scoring_elements 0.91497
published_at 2026-05-12T12:55:00Z
1
value 0.06937
scoring_system epss
scoring_elements 0.91487
published_at 2026-05-11T12:55:00Z
2
value 0.06937
scoring_system epss
scoring_elements 0.91374
published_at 2026-04-01T12:55:00Z
3
value 0.06937
scoring_system epss
scoring_elements 0.91379
published_at 2026-04-02T12:55:00Z
4
value 0.06937
scoring_system epss
scoring_elements 0.9139
published_at 2026-04-04T12:55:00Z
5
value 0.06937
scoring_system epss
scoring_elements 0.91397
published_at 2026-04-07T12:55:00Z
6
value 0.06937
scoring_system epss
scoring_elements 0.91409
published_at 2026-04-08T12:55:00Z
7
value 0.06937
scoring_system epss
scoring_elements 0.91416
published_at 2026-04-09T12:55:00Z
8
value 0.06937
scoring_system epss
scoring_elements 0.91422
published_at 2026-04-11T12:55:00Z
9
value 0.06937
scoring_system epss
scoring_elements 0.91425
published_at 2026-04-12T12:55:00Z
10
value 0.06937
scoring_system epss
scoring_elements 0.91424
published_at 2026-04-13T12:55:00Z
11
value 0.06937
scoring_system epss
scoring_elements 0.91448
published_at 2026-04-16T12:55:00Z
12
value 0.06937
scoring_system epss
scoring_elements 0.91443
published_at 2026-04-18T12:55:00Z
13
value 0.06937
scoring_system epss
scoring_elements 0.91444
published_at 2026-04-21T12:55:00Z
14
value 0.06937
scoring_system epss
scoring_elements 0.91454
published_at 2026-04-24T12:55:00Z
15
value 0.06937
scoring_system epss
scoring_elements 0.91451
published_at 2026-04-26T12:55:00Z
16
value 0.06937
scoring_system epss
scoring_elements 0.9145
published_at 2026-04-29T12:55:00Z
17
value 0.06937
scoring_system epss
scoring_elements 0.91464
published_at 2026-05-05T12:55:00Z
18
value 0.06937
scoring_system epss
scoring_elements 0.91479
published_at 2026-05-07T12:55:00Z
19
value 0.06937
scoring_system epss
scoring_elements 0.91488
published_at 2026-05-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-6445
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6445
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6445
2
reference_url https://dumpco.re/blog/ntpsec-bugs
reference_id
reference_type
scores
url https://dumpco.re/blog/ntpsec-bugs
3
reference_url https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
reference_id
reference_type
scores
url https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
4
reference_url https://www.exploit-db.com/exploits/46177/
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/46177/
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919513
reference_id 919513
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919513
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ntpsec:ntpsec:*:*:*:*:*:*:*:*
7
reference_url https://dumpco.re/bugs/ntpsec-authed-npe
reference_id CVE-2019-6445
reference_type exploit
scores
url https://dumpco.re/bugs/ntpsec-authed-npe
8
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/46177.py
reference_id CVE-2019-6445
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/46177.py
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-6445
reference_id CVE-2019-6445
reference_type
scores
0
value 4.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:N/I:N/A:P
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2019-6445
fixed_packages
0
url pkg:deb/debian/ntpsec@1.1.3%2Bdfsg1-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.1.3%2Bdfsg1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.1.3%252Bdfsg1-1%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
4
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2019-6445
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-upjp-hfwn-hkg5
14
url VCID-vsbt-fd9b-bqbh
vulnerability_id VCID-vsbt-fd9b-bqbh
summary
Multiple vulnerabilities have been found in NTP, the worst of which
    could lead to remote code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7185.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7185.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-7185
reference_id
reference_type
scores
0
value 0.0292
scoring_system epss
scoring_elements 0.86327
published_at 2026-04-01T12:55:00Z
1
value 0.0292
scoring_system epss
scoring_elements 0.86501
published_at 2026-05-12T12:55:00Z
2
value 0.0292
scoring_system epss
scoring_elements 0.86492
published_at 2026-05-09T12:55:00Z
3
value 0.0292
scoring_system epss
scoring_elements 0.86489
published_at 2026-05-11T12:55:00Z
4
value 0.0292
scoring_system epss
scoring_elements 0.86338
published_at 2026-04-02T12:55:00Z
5
value 0.0292
scoring_system epss
scoring_elements 0.86356
published_at 2026-04-04T12:55:00Z
6
value 0.0292
scoring_system epss
scoring_elements 0.86357
published_at 2026-04-07T12:55:00Z
7
value 0.0292
scoring_system epss
scoring_elements 0.86375
published_at 2026-04-08T12:55:00Z
8
value 0.0292
scoring_system epss
scoring_elements 0.86385
published_at 2026-04-09T12:55:00Z
9
value 0.0292
scoring_system epss
scoring_elements 0.86399
published_at 2026-04-11T12:55:00Z
10
value 0.0292
scoring_system epss
scoring_elements 0.86397
published_at 2026-04-12T12:55:00Z
11
value 0.0292
scoring_system epss
scoring_elements 0.86392
published_at 2026-04-13T12:55:00Z
12
value 0.0292
scoring_system epss
scoring_elements 0.86408
published_at 2026-04-16T12:55:00Z
13
value 0.0292
scoring_system epss
scoring_elements 0.86413
published_at 2026-04-18T12:55:00Z
14
value 0.0292
scoring_system epss
scoring_elements 0.86407
published_at 2026-04-21T12:55:00Z
15
value 0.0292
scoring_system epss
scoring_elements 0.86426
published_at 2026-04-24T12:55:00Z
16
value 0.0292
scoring_system epss
scoring_elements 0.86436
published_at 2026-04-26T12:55:00Z
17
value 0.0292
scoring_system epss
scoring_elements 0.86432
published_at 2026-04-29T12:55:00Z
18
value 0.0292
scoring_system epss
scoring_elements 0.86453
published_at 2026-05-05T12:55:00Z
19
value 0.0292
scoring_system epss
scoring_elements 0.86472
published_at 2026-05-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-7185
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7185
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7185
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1550220
reference_id 1550220
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1550220
5
reference_url https://security.archlinux.org/ASA-201803-11
reference_id ASA-201803-11
reference_type
scores
url https://security.archlinux.org/ASA-201803-11
6
reference_url https://security.archlinux.org/AVG-647
reference_id AVG-647
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-647
7
reference_url https://security.gentoo.org/glsa/201805-12
reference_id GLSA-201805-12
reference_type
scores
url https://security.gentoo.org/glsa/201805-12
8
reference_url https://usn.ubuntu.com/3707-1/
reference_id USN-3707-1
reference_type
scores
url https://usn.ubuntu.com/3707-1/
9
reference_url https://usn.ubuntu.com/3707-2/
reference_id USN-3707-2
reference_type
scores
url https://usn.ubuntu.com/3707-2/
fixed_packages
0
url pkg:deb/debian/ntpsec@0?distro=trixie
purl pkg:deb/debian/ntpsec@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@0%3Fdistro=trixie
1
url pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.0%2Bdfsg1-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.0%252Bdfsg1-4%3Fdistro=trixie
2
url pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.2%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.2%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.3%2Bdfsg1-8?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie
4
url pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/ntpsec@1.2.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2018-7185
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vsbt-fd9b-bqbh
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/ntpsec@1.2.3%252Bdfsg1-8%3Fdistro=trixie