The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted logconfig commands.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ntp | Nov 9, 2015 | Oct 27, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 21, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade ntpdateUpgrade ntp | Nov 30, 2017 | Jul 21, 2017 |
| Ntp | — | Upgrade to the latest version of NTP | Feb 23, 2023 | Jul 21, 2017 |
| Oracle_linux | — | Upgrade sntpUpgrade ntpUpgrade ntp-docUpgrade ntp-perlUpgrade ntpdate | May 12, 2016 | May 12, 2016 |
| Redhat_linux | — | Upgrade sntpUpgrade ntp-perlUpgrade ntpdateUpgrade ntp-docUpgrade ntp-debuginfoNo solution existsUpgrade ntp | Jul 1, 2017 | Oct 27, 2015 |
| Suse | — | Upgrade ntp-docUpgrade ntpUpgrade yast2-ntp-client | May 17, 2016 | Oct 27, 2015 |
| Ubuntu | — | Upgrade ntp | Nov 9, 2015 | Oct 27, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub