Vulnerability
CVE-2017-6460
HIGH 8.8
CVE-2017-6460 is a high-severity vulnerability (CVSS v3.0 8.8). As of 2026-11-11, no host in our data shows software it affects on an open service.
Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction list response.
- Published
- 2017-03-27
- Last modified
- 2026-06-17
- CVSS score
- 8.8 CVSS v3.0
- CVSS vector (v3.0)
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Exploit likelihood (EPSS)
- 2.7% in the next 30 days (top 15% of CVEs)
Exposure in our data
0 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Not counted: 1 459 hosts where the software version is too vague to tell (only a major release).
Counted 2026-11-11 04:20 UTC
By country
Not seen on any scanned host.
Affected software seen
—