Vulnerability
CVE-2016-7426
HIGH 7.5
CVE-2016-7426 is a high-severity vulnerability (CVSS v3.1 7.5). As of 2026-11-11, no host in our data shows software it affects on an open service.
NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.
- Published
- 2017-01-13
- Last modified
- 2026-06-17
- CVSS score
- 7.5 CVSS v3.1
- CVSS vector (v3.1)
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Exploit likelihood (EPSS)
- 12.4% in the next 30 days (top 4% of CVEs)
Exposure in our data
0 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Not counted: 1 475 hosts with this CVE only from an older observation.
Counted 2026-11-11 04:20 UTC
By country
Not seen on any scanned host.
Affected software seen
—