Published: 24/08/2017 Updated: 02/08/2018

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 5.3 | Impact Score: 3.6 | Exploitability Score: 1.6

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:N/A:P

ntpd in ntp prior to 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a computer entrusted to perform remote configuration to cause a denial of service (service crash) via a NULL byte in a crafted configuration directive packet.

Vulnerable Product	Search on Vulmon	Subscribe to Product
fedoraproject fedora 21
fedoraproject fedora 22
fedoraproject fedora 23
debian debian linux 7.0
debian debian linux 8.0
ntp ntp

Several security issues were fixed in NTP ...

Several vulnerabilities were discovered in the Network Time Protocol daemon and utility programs: CVE-2015-5146 A flaw was found in the way ntpd processed certain remote configuration packets An attacker could use a specially crafted package to cause ntpd to crash if: ntpd enabled remote configuration The attacker had the ...

As <a href="supportntporg/bin/view/Main/SecurityNotice#June_2015_NTP_Security_Vulnerabi">discussed upstream</a>, a flaw was found in the way ntpd processed certain remote configuration packets Note that remote configuration is disabled by default in NTP (CVE-2015-5146) It was found that the :config command can be used to se ...

ntpd in ntp before 428p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a computer entrusted to perform remote configuration to cause a denial of service (service crash) via a NULL byte in a crafted configuration directive packet ...

CWE-20 https://security.gentoo.org/glsa/201509-01 https://bugzilla.redhat.com/show_bug.cgi?id=1238136 http://www.securitytracker.com/id/1034168 http://www.securityfocus.com/bid/75589 http://www.debian.org/security/2015/dsa-3388 http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166992.html http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.html http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html http://bugs.ntp.org/show_bug.cgi?id=2853 https://security.netapp.com/advisory/ntap-20180731-0003/https://nvd.nist.gov https://usn.ubuntu.com/2783-1/

CVE-2015-5146

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect