{"id":"CVE-2016-2519","details":"ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which triggers the ctl_getitem function to return a NULL value.","modified":"2026-03-15T22:05:53.468855Z","published":"2017-01-30T21:59:01.113Z","related":["SUSE-SU-2016:1278-1","SUSE-SU-2016:1291-1","SUSE-SU-2016:1471-1","SUSE-SU-2016:1568-1","openSUSE-SU-2024:10181-1"],"references":[{"type":"WEB","url":"http://www.securitytracker.com/id/1035705"},{"type":"ADVISORY","url":"https://www.kb.cert.org/vuls/id/718152"},{"type":"ADVISORY","url":"http://support.ntp.org/bin/view/Main/NtpBug3008"},{"type":"ADVISORY","url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/88204"},{"type":"ADVISORY","url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201607-15"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20171004-0002/"}],"affected":[{"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2519.json","unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"4.2.8"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.0"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.1"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.2"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.3"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.4"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.5"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.6"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.7"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.8"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.9"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.10"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.11"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.12"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.13"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.14"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.15"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.16"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.17"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.18"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.19"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.20"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.21"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.22"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.23"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.24"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.25"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.26"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.27"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.28"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.29"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.30"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.31"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.32"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.33"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.34"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.35"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.36"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.37"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.38"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.39"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.40"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.41"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.42"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.43"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.44"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.45"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.46"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.47"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.48"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.49"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.50"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.51"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.52"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.53"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.54"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.55"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.56"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.57"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.58"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.59"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.60"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.61"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.62"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.63"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.64"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.65"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.66"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.67"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.68"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.69"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.70"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.71"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.72"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.73"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.74"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.75"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.76"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.77"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.78"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.79"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.80"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.81"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.82"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.83"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.84"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.85"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.86"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.87"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.88"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.89"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.90"}]},{"events":[{"introduced":"0"},{"last_affected":"4.3.91"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}