Home

CVE-2015-5146

Description

ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a computer entrusted to perform remote configuration to cause a denial of service (service crash) via a NULL byte in a crafted configuration directive packet.

Risk Information

Base Score
5.3
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
2.36

Associated Vulnerability

VulnerabilityOS Platform
Network Time Protocol daemon and utility programs (USN-2783-1) ntp_4.2.6.p5+dfsg-3ubuntu8.1_i386.debLinux
Network Time Protocol daemon and utility programs (USN-2783-1) ntp_4.2.6.p5+dfsg-3ubuntu8.1_amd64.debLinux
ntp security update(DSA-3388-1) ntp_4.2.8p8+dfsg-1_amd64.debLinux
ntp security update(DSA-3388-1) ntp_4.2.6.p5+dfsg-7+deb8u1_i386.debLinux
ntp security update(DSA-3388-1) ntp_4.2.6.p5+dfsg-7+deb8u1_amd64.debLinux
ntp security update(DSA-3629-1) ntp_4.2.8p8+dfsg-1_i386.debLinux
ntp security update(DSA-3629-1) ntp_4.2.8p8+dfsg-1_amd64.debLinux
ntp security update(DSA-3629-1) ntp_4.2.6.p5+dfsg-7+deb8u2_i386.debLinux
ntp security update(DSA-3629-1) ntp_4.2.6.p5+dfsg-7+deb8u2_amd64.debLinux
Improper Input Validation Vulnerability (CVE-2015-5146)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234