ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or filegen configuration command that is not enabled during compilation.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ntp | Nov 9, 2015 | Oct 27, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 21, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade ntpdateUpgrade ntp | Nov 30, 2017 | Jul 21, 2017 |
| Ntp | — | Upgrade to the latest version of NTP | Feb 23, 2023 | Jul 21, 2017 |
| Oracle_linux | — | Upgrade sntpUpgrade ntpdateUpgrade ntp-perlUpgrade ntp-docUpgrade ntp | May 12, 2016 | May 12, 2016 |
| Redhat_linux | — | Upgrade ntp-docUpgrade ntpUpgrade ntp-perlUpgrade ntpdateNo solution existsUpgrade ntp-debuginfoUpgrade sntp | Jul 1, 2017 | Oct 27, 2015 |
| Ubuntu | — | Upgrade ntp | Nov 9, 2015 | Oct 27, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub