Vulnerabilities > Openntpd

DATE CVE VULNERABILITY TITLE RISK
2017-01-31 CVE-2016-5117 7PK - Security Features vulnerability in Openntpd 6.0
OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote attackers to bypass the man-in-the-middle mitigations via a crafted timestamp constraint with a valid certificate.
network
high complexity
openntpd CWE-254
5.9