CVE Feed

    Dashboard / CVE / CVE-2020-13817

    CVE-2020-13817

    ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.

    Published:Mar 3, 2020
    Last Modified:May 5, 2025
    EPS:Jun 4, 2020
    EPSS Score:0.00375
    CVSS Score:7.4

    Affected Products

    Vendor
    Fujitsu
    Product
    M10-1
    Vendor
    Fujitsu
    Product
    M10-1 Firmware
    Vendor
    Fujitsu
    Product
    M10-4
    Vendor
    Fujitsu
    Product
    M10-4 Firmware
    Vendor
    Fujitsu
    Product
    M10-4s
    Vendor
    Fujitsu
    Product
    M10-4s Firmware
    Vendor
    Fujitsu
    Product
    M12-1
    Vendor
    Fujitsu
    Product
    M12-1 Firmware
    Vendor
    Fujitsu
    Product
    M12-2
    Vendor
    Fujitsu
    Product
    M12-2 Firmware
    Vendor
    Fujitsu
    Product
    M12-2s
    Vendor
    Fujitsu
    Product
    M12-2s Firmware
    Vendor
    Netapp
    Product
    Cloud Backup
    Vendor
    Netapp
    Product
    Clustered Data Ontap
    Vendor
    Netapp
    Product
    Data Ontap
    Vendor
    Netapp
    Product
    Element Software
    Vendor
    Netapp
    Product
    H300e
    Vendor
    Netapp
    Product
    H300e Firmware
    Vendor
    Netapp
    Product
    H300s
    Vendor
    Netapp
    Product
    H300s Firmware
    Vendor
    Netapp
    Product
    H410c
    Vendor
    Netapp
    Product
    H410c Firmware
    Vendor
    Netapp
    Product
    H410s
    Vendor
    Netapp
    Product
    H410s Firmware
    Vendor
    Netapp
    Product
    H500e
    Vendor
    Netapp
    Product
    H500e Firmware
    Vendor
    Netapp
    Product
    H500s
    Vendor
    Netapp
    Product
    H500s Firmware
    Vendor
    Netapp
    Product
    H700e
    Vendor
    Netapp
    Product
    H700e Firmware
    Vendor
    Netapp
    Product
    H700s
    Vendor
    Netapp
    Product
    H700s Firmware
    Vendor
    Netapp
    Product
    Hci Compute Node
    Vendor
    Netapp
    Product
    Hci Compute Node Firmware
    Vendor
    Netapp
    Product
    Hci Management Node
    Vendor
    Netapp
    Product
    Ontap Tools
    Vendor
    Netapp
    Product
    Solidfire
    Vendor
    Netapp
    Product
    Steelstore Cloud Integrated Storage
    Vendor
    Ntp
    Product
    Ntp
    Vendor
    Opensuse
    Product
    Leap
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Related CVEs

    CVE-2021-23840 (CVSS 7.5) — Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in …
    CVE-2021-3326 (CVSS 7.5) — The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input s…
    CVE-2020-8284 (CVSS 3.7) — A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a gi…
    CVE-2020-8285 (CVSS 7.5) — curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in F…
    CVE-2020-1968 (CVSS 3.7) — The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to comput…
    CVE-2020-8177 (CVSS 7.8) — curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that c…
    CVE-2018-20685 (CVSS 5.3) — In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via t…
    CVE-2019-6111 (CVSS 5.9) — An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server …
    CVE-2019-6109 (CVSS 6.8) — An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious…
    CVE-2018-1000007 (CVSS 9.8) — libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send cu…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High