PT-2015-6781 · Nts+2 · Ntp+2

Martin Prpič · Published 2015-07-02 · Updated 2018-08-02 · CVE-2015-5146

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ntp versions prior to 4.2.8p3

Description The issue allows remote authenticated users with knowledge of the configuration password and access to a computer entrusted to perform remote configuration to cause a denial of service (service crash) via a NULL byte in a crafted configuration directive packet.

Recommendations For versions prior to 4.2.8p3, update to version 4.2.8p3 or later to resolve the issue. As a temporary workaround, consider restricting access to remote configuration to minimize the risk of exploitation.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2017-2335

CVE-2015-5146

DLA-335-1

DSA-3388-1

MGASA-2015-0348

USN-2783-1

Affected Products

Alt Linux

Ubuntu

Ntp

References · 122

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_nak_to_the_future.rb · Exploit
• 🔥 https://github.com/opsxcq/exploit-CVE-2016-7434 · Exploit
• https://cve.org/CVERecord?id=CVE-2015-5146 · Security Note
• https://bdu.fstec.ru/vul/2017-02017 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2516 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5194 · Security Note
• https://security-tracker.debian.org/tracker/source-package/ntp · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9310 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7975 · Security Note
• http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5146 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5219 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2517 · Security Note
• http://debian.org/security/2015/dsa-3388 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7855 · Security Note