The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mode packet.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9310.json"
[ { "events": [ { "introduced": "0" }, { "last_affected": "4.2.8" } ] } ]