How severe is CVE-2014-125036?

CVE-2014-125036 has a CVSS 3.x base score of 2.6, rated low severity. It is exploitable over an adjacent network with high attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability low.

Is CVE-2014-125036 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (32nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2014-125036?

CVE-2014-125036 affects Ansible-ntp Project Ansible-ntp. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2014-125036?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2014-125036 published?

CVE-2014-125036 was published on 2023-01-02 and last updated on 2026-06-17.

CVE-2014-125036

CVE-2014-125036 is a low-severity vulnerability in Ansible-ntp Project Ansible-ntp with a CVSS 3.x base score of 2.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-406.

Key facts

Severity: Low (CVSS 3.x base score 2.6)
CVSS v2: 1.4
EPSS exploit prediction: 0% (32nd percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-406
Affected product: Ansible-ntp Project Ansible-ntp
Published: 2023-01-02
Last modified: 2026-06-17

Description

A vulnerability, which was classified as problematic, has been found in drybjed ansible-ntp. Affected by this issue is some unknown functionality of the file meta/main.yml. The manipulation leads to insufficient control of network message volume. The attack can only be done within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. The patch is identified as ed4ca2cf012677973c220cdba36b5c60bfa0260b. It is recommended to apply a patch to fix this issue. VDB-217190 is the identifier assigned to this vulnerability.

Frequently asked questions

What is CVE-2014-125036?: A vulnerability, which was classified as problematic, has been found in drybjed ansible-ntp. Affected by this issue is some unknown functionality of the file meta/main.yml. The manipulation leads to insufficient control of network message volume. The attack can only be done within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. The patch is identified as ed4ca2cf012677973c220cdba36b5c60bfa0260b. It is recommended to apply a patch to fix this issue. VDB-217190 is the identifier assigned to this vulnerability.
How severe is CVE-2014-125036?: CVE-2014-125036 has a CVSS 3.x base score of 2.6, rated low severity. It is exploitable over an adjacent network with high attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability low.
Is CVE-2014-125036 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (32nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2014-125036?: CVE-2014-125036 affects Ansible-ntp Project Ansible-ntp. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2014-125036?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2014-125036 published?: CVE-2014-125036 was published on 2023-01-02 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:ansible-ntp_project:ansible-ntp:*:*:*:*:*:*:*:*

Other CWE-406 vulnerabilities

CVE-2021-38135 — High (CVSS 8.6): Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000.
CVE-2022-0028 — High (CVSS 8.6): A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified…
CVE-2021-38487 — High (CVSS 8.2): RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an…
CVE-2023-49203 — High (CVSS 7.5): Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb…
CVE-2023-28456 — High (CVSS 7.5): An issue was discovered in Technitium through 11.0.2. It enables attackers to launch amplification attacks (3 times…
CVE-2023-28455 — High (CVSS 7.5): An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop…

Browse all CWE-406 vulnerabilities →