ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or filegen configuration command that is not enabled during compilation.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
13 Feb 2023, 00:51
Type | Values Removed | Values Added |
---|---|---|
Summary | ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or filegen configuration command that is not enabled during compilation. | |
References |
|
02 Feb 2023, 20:20
Type | Values Removed | Values Added |
---|---|---|
Summary | It was found that ntpd would exit with a segmentation fault when a statistics type that was not enabled during compilation (e.g. timingstats) was referenced by the statistics or filegen configuration command. | |
References |
|
Information
Published : 2017-07-21 14:29
Updated : 2023-12-10 12:15
NVD link : CVE-2015-5195
Mitre link : CVE-2015-5195
CVE.ORG link : CVE-2015-5195
JSON object : View
Products Affected
redhat
- enterprise_linux_hpc_node
- enterprise_linux_workstation
- enterprise_linux_server
- enterprise_linux_desktop
fedoraproject
- fedora
ntp
- ntp
canonical
- ubuntu_linux
debian
- debian_linux
CWE
CWE-20
Improper Input Validation