PT-2015-6797 · Nts+5 · Ntp+5

Martin Prpič · Published 2014-12-24 · Updated 2023-02-13 · CVE-2015-5194

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ntp versions prior to 4.2.7p42

Description The issue allows remote attackers to cause a denial of service, resulting in the ntpd crash, via crafted logconfig commands. This is due to an uninitialized variable when processing malformed logconfig configuration commands.

Recommendations For versions prior to 4.2.7p42, update to version 4.2.7p42 or later to resolve the issue. As a temporary workaround, consider restricting access to the logconfig command to minimize the risk of exploitation.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2014-2486

CESA-2016_0780

CESA-2016_2583

CVE-2015-5194

DLA-335-1

DSA-3388-1

MGASA-2015-0348

RHSA-2016:0780

RHSA-2016:2583

RHSA-2016_0780

RHSA-2016_2583

SUSE-SU-2016:1311-1

SUSE-SU-2016_1311-1

USN-2783-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Ntp

References · 123

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ntp/ntp_nak_to_the_future.rb · Exploit
• https://github.com/ntp-project/ntp/commit/553f2fa65865c31c5e3c48812cfd46176cffdd27 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2016:1311-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-5194 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-5194 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.html · Vendor Advisory
• http://ubuntu.com/usn/USN-2783-1 · Vendor Advisory
• http://openwall.com/lists/oss-security/2015/08/25/3 · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=1254542 · Patch
• https://ubuntu.com/security/CVE-2015-5196 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5194 · Security Note
• https://ubuntu.com/security/CVE-2015-7850 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-5219 · Vendor Advisory