Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-5d3y-4u9j-g7de
SummaryInteger overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.
Aliases
0
alias CVE-2004-0657
Fixed_packages
0
url pkg:deb/debian/ntp@4.0?distro=bullseye
purl pkg:deb/debian/ntp@4.0?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntp@4.0%3Fdistro=bullseye
1
url pkg:deb/debian/ntp@1:4.2.8p15%2Bdfsg-1?distro=bullseye
purl pkg:deb/debian/ntp@1:4.2.8p15%2Bdfsg-1?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ntp@1:4.2.8p15%252Bdfsg-1%3Fdistro=bullseye
Affected_packages
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0657.json
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2004-0657.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2004-0657
reference_id
reference_type
scores
0
value 0.06061
scoring_system epss
scoring_elements 0.90898
published_at 2026-06-04T12:55:00Z
1
value 0.06061
scoring_system epss
scoring_elements 0.90913
published_at 2026-06-05T12:55:00Z
2
value 0.06061
scoring_system epss
scoring_elements 0.90912
published_at 2026-06-06T12:55:00Z
3
value 0.06061
scoring_system epss
scoring_elements 0.90909
published_at 2026-06-07T12:55:00Z
4
value 0.06061
scoring_system epss
scoring_elements 0.90906
published_at 2026-06-08T12:55:00Z
5
value 0.06061
scoring_system epss
scoring_elements 0.90922
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2004-0657
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0657
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0657
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1850552
reference_id 1850552
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1850552
Weaknesses
0
cwe_id 190
name Integer Overflow or Wraparound
description The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.
Exploits
Severity_range_score7.1 - 7.1
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-5d3y-4u9j-g7de