CVE-2014-9295

CVE-2014-9295 describes multiple stack-based buffer overflows in NTP versions prior to 4.2.8, specifically within the ntpd daemon. These flaws, found in functions like crypto_recv, ctl_putdata, and configure, allow unauthenticated remote attackers to execute arbitrary code on affected systems. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its low attack complexity and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation in the KEV catalog or public exploit frameworks like Metasploit or ExploitDB, the vulnerability has garnered significant community discussion and media coverage, indicating its perceived risk.