The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and band…

Published 9 y ago 2016-12-09 · modified 4 mo ago 2026-06-17 · JSON

CVSS

7.5

v3.1 · CNA

CISA KEV

not known exploited

EPSS

9.0%

percentile 95%

Public exploits

none known

The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop.

CISA SSVC assessment

Exploitation: Proof of concept public
Automatable: yes
Technical impact: partial
Assessed: 11 mo ago 2025-12-04

Exploit prediction (EPSS)

8.97% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CISA ADP	3.1	7.5	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
CNA	3.1	7.5	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
NVD	3.0	7.5	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
NVD	2.0	7.8	`AV:N/AC:L/Au:N/C:N/I:N/A:C`

Classification

Weakness

CWE-835 Loop with Unreachable Exit Condition
CWE-399 Resource Management Errors

References

openwall.com /lists/oss-security/2016/08/03/7 · mailing-list, x_refsource_MLIST, x_transferred
bugzilla.redhat.com /show_bug.cgi?id=1363710 · x_refsource_CONFIRM, x_transferred
securityfocus.com /bid/92277 · vdb-entry, x_refsource_BID, x_transferred
security.gentoo.org /glsa/201701-05 · vendor-advisory, x_refsource_GENTOO, x_transferred
git.busybox.net /busybox/commit/?id=150dc7a2b483b8338a3e185c478b4b23ee884e71 · x_refsource_CONFIRM, x_transferred
seclists.org /fulldisclosure/2019/Jun/18 · mailing-list, x_refsource_FULLDISC, x_transferred
seclists.org /bugtraq/2019/Jun/14 · mailing-list, x_refsource_BUGTRAQ, x_transferred
packetstormsecurity.com /files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentia · x_refsource_MISC, x_transferred
seclists.org /fulldisclosure/2019/Sep/7 · mailing-list, x_refsource_FULLDISC, x_transferred
seclists.org /bugtraq/2019/Sep/7 · mailing-list, x_refsource_BUGTRAQ, x_transferred
packetstormsecurity.com /files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html · x_refsource_MISC, x_transferred
seclists.org /fulldisclosure/2020/Mar/15 · mailing-list, x_refsource_FULLDISC, x_transferred
seclists.org /fulldisclosure/2020/Aug/20 · mailing-list, x_refsource_FULLDISC, x_transferred

Sources

CVE List: CVE-2016-6301
NVD: CVE-2016-6301

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.