Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-26551

Published: 11/04/2023 Updated: 20/04/2023
CVSS v3 Base Score: 5.6 | Impact Score: 3.4 | Exploitability Score: 2.2
VMScore: 0
Subscribe to Ntp

Vulnerability Summary

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ntp ntp 4.2.8

Vendor Advisories

Amazon Linux 2: ALAS-2024-2396
mstolfp in libntp/mstolfpc in NTP 428p15 has an out-of-bounds write in the cp&lt;cpdec while loop (CVE-2023-26551) mstolfp in libntp/mstolfpc in NTP 428p15 has an out-of-bounds write when adding a decimal point (CVE-2023-26552) mstolfp in libntp/mstolfpc in NTP 428p15 has an out-of-bounds write when copying the trailing number (CVE-2023 ...
Red Hat:
DescriptionThe MITRE CVE dictionary describes this issue as: mstolfp in libntp/mstolfpc in NTP 428p15 has an out-of-bounds write in the cp&amp;lt;cpdec while loop ...
Brocade Security Advisories: Access Denied
Menu Log in ...

References

CWE-787https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26551https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321https://nvd.nist.govhttps://alas.aws.amazon.com/AL2/ALAS-2024-2396.html
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook