Skip to content
Fencer Vulns
high 7.4

CVE-2020-13817 json

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time chang…

published 2020-06-04 6 y ago modified 2026-06-17 4 mo ago also EUVD-2020-6032

cvss
7.4
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
3.4%
EPSS 3.4% chance of exploitation in 30 days, percentile 88%
public exploits
0
none known

Summary

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.

Patch / fix

  • ntp ntp 4.2.8, 4.3.100
  • fujitsu m10-1_firmware xcp2410
  • fujitsu m10-4_firmware xcp2410, xcp3110
  • fujitsu m10-4s_firmware xcp2410, xcp3110
  • fujitsu m12-1_firmware xcp2410, xcp3110
  • fujitsu m12-2_firmware xcp2410, xcp3110
  • fujitsu m12-2s_firmware xcp2410, xcp3110
  • ntp Debian 11 1:4.2.8p14+dfsg-1

debian advisories DEBIAN-CVE-2020-13817

  • ntp RHEL 7 4.2.6p5-29.el7_8.2
  • sntp RHEL 7 4.2.6p5-29.el7_8.2
  • ntpdate RHEL 7 4.2.6p5-29.el7_8.2
  • ntp-perl RHEL 7 4.2.6p5-29.el7_8.2

red hat advisories RHSA-2020:2663

  • ntp SLES for SAP 15, SLES 15-LTSS, SLE Module for Legacy 15 SP2 +1 more 4.2.8p15-4.10.1
  • ntp SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES for SAP 12 SP3 +12 more 4.2.8p15-88.1
  • ntp SLES 11 SP4-LTSS 4.2.8p15-64.16.1

suse advisories SUSE-SU-2020:1823-1SUSE-SU-2020:14415-1SUSE-SU-2020:1805-1

  • ntp openSUSE Tumbleweed 4.2.8p15-7.2
  • ntp openSUSE Leap 15.2 4.2.8p15-lp152.3.3.1
  • ntp openSUSE Leap 15.1 4.2.8p15-lp151.2.3.1

opensuse advisories openSUSE-SU-2024:11102-1openSUSE-SU-2020:1007-1openSUSE-SU-2020:0934-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2020-13817 updated cvss 7.4

ntp: ntpd using highly predictable transmit timestamps could result in time change or DoS

  • Red Hat Enterprise Linux 5 ntp Red Hat Enterprise Linux 6 ntp, ntpdate, ntp-perl
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat Enterprise Linux Client (v. 7) ntp 4.2.6p5-29.el7_8.2, ntpdate 4.2.6p5-29.el7_8.2 Red Hat Enterprise Linux Client Optional (v. 7) sntp 4.2.6p5-29.el7_8.2, ntp-perl 4.2.6p5-29.el7_8.2 Red Hat Enterprise Linux ComputeNode (v. 7) ntp 4.2.6p5-29.el7_8.2, ntpdate 4.2.6p5-29.el7_8.2 Red Hat Enterprise Linux ComputeNode Optional (v. 7) sntp 4.2.6p5-29.el7_8.2, ntp-perl 4.2.6p5-29.el7_8.2 Red Hat Enterprise Linux Server (v. 7) ntp 4.2.6p5-29.el7_8.2, ntpdate 4.2.6p5-29.el7_8.2 Red Hat Enterprise Linux Server Optional (v. 7) sntp 4.2.6p5-29.el7_8.2, ntp-perl 4.2.6p5-29.el7_8.2
    +2 more products
    Red Hat Enterprise Linux Workstation (v. 7) ntp 4.2.6p5-29.el7_8.2, ntpdate 4.2.6p5-29.el7_8.2 Red Hat Enterprise Linux Workstation Optional (v. 7) sntp 4.2.6p5-29.el7_8.2, ntp-perl 4.2.6p5-29.el7_8.2
    fixed: vendor fix RHSA-2020:2663

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-23-234-01 updated cvss 7.4

Hitachi Energy AFF66x

  • Hitachi Energy AFF660/665 <= 03.0.02
    affected: vendor fix, mitigation “Hitachi Energy recommends the following actions:” search.abb.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
18 mo ago

Exploit prediction

3.36% chance of exploitation in the next 30 days, higher than 88% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.0 5.9 CVSS:3.0/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
CISA ADP 3.1 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
NVD 3.1 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
CNA 3.1 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
CNA 3.0 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P

Classification

Weakness
  • CWE-330 Use of Insufficiently Random Values

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.