Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Openntpd Subscribe
Filtered by product Openntpd
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-5117 1 Openntpd 1 Openntpd 2017-02-24 4.3 MEDIUM 5.9 MEDIUM
OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote attackers to bypass the man-in-the-middle mitigations via a crafted timestamp constraint with a valid certificate.