CVE-2016-2519

CVE-2016-2519 is a denial-of-service vulnerability affecting ntpd in NTP versions before 4.2.8p7 and 4.3.x before 4.3.92. A remote attacker can exploit this by sending a large request, causing the ctl_getitem function to return a NULL value and subsequently abort ntpd. This medium-severity vulnerability has a CVSS score of 5.9, indicating a network-based attack with high impact on availability and high attack complexity. There is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, though it has received some community discussion and media coverage.