CVE-2009-1252: Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4...

Security readout for executives and security teams

CVE-2009-1252 is an old NTP daemon vulnerability that could let a remote attacker run code on a vulnerable time server. The risk is conditional: sources tie it to ntpd builds before fixed releases when OpenSSL and autokey are enabled. Most exposure is likely in legacy Unix/Linux systems, appliances, or virtual infrastructure still running affected ntpd versions with autokey enabled. Modern patched distributions are less likely exposed, but old embedded or unmanaged NTP services deserve review. Treat as high priority for legacy infrastructure and exposed NTP services. It is old, but remote code execution against time infrastructure can affect availability and trust, and vulnerable systems may persist in appliances or neglected servers. Mitigation focus: Upgrade ntpd to a vendor-supported fixed package or newer upstream release.; Disable autokey where it is not operationally required.; Restrict NTP service access to trusted networks and approved peers..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.