The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted logconfig commands.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
History
13 Feb 2023, 00:51
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Summary | The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted logconfig commands. |
02 Feb 2023, 20:20
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Summary | It was found that ntpd could crash due to an uninitialized variable when processing malformed logconfig configuration commands. |
Information
Published : 2017-07-21 14:29
Updated : 2023-12-10 12:15
NVD link : CVE-2015-5194
Mitre link : CVE-2015-5194
CVE.ORG link : CVE-2015-5194
JSON object : View
Products Affected
redhat
- enterprise_linux_server
- enterprise_linux_desktop
- enterprise_linux_hpc_node
- enterprise_linux_workstation
canonical
- ubuntu_linux
suse
- openstack_cloud
- manager
- linux_enterprise_debuginfo
- linux_enterprise_server
- manager_proxy
debian
- debian_linux
fedoraproject
- fedora
ntp
- ntp
CWE
CWE-20
Improper Input Validation