Lucene search
HistoryApr 11, 2023 - 9:15 p.m.
CVE-2023-26552
ntp
4.2.8p15
mstolfp
libntp
mstolfp.c
cve-2023-26552
nvd
security vulnerability
out-of-bounds write
5.6 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.3%
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.
Affected configurations
Node
ntpntpMatch4.2.8p15
Related
nvd
nvd
CVE-2023-26552
2023-04-11 21:15:21
debiancve
debiancve
CVE-2023-26552
2023-04-11 21:15:21
redhatcve
redhatcve
CVE-2023-26552
2023-04-13 13:31:04
osv
osv
CVE-2023-26552
2023-04-11 21:15:21
ubuntucve
ubuntucve
CVE-2023-26552
2023-04-11 00:00:00
prion
prion
Out-of-bounds
2023-04-11 21:15:00
cvelist
cvelist
CVE-2023-26552
2023-04-11 00:00:00
ics
ics
Siemens SITOP UPS1600
2024-06-13 12:00:00
aix
aix
AIX is vulnerable to a denial of service due to NTP
2023-10-05 10:43:28
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2171-1)
2023-05-12 00:00:00
Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2023-2565)
2023-08-03 00:00:00
Slackware: Security Advisory (SSA:2023-153-02)
2023-06-05 00:00:00
nessus
nessus
SUSE SLES12 Security Update : ntp (SUSE-SU-2023:2171-1)
2023-05-14 00:00:00
EulerOS 2.0 SP9 : ntp (EulerOS-SA-2023-2591)
2023-08-08 00:00:00
EulerOS Virtualization 2.9.1 : ntp (EulerOS-SA-2023-2964)
2024-01-16 00:00:00
ibm
ibm
slackware
slackware
[slackware-security] ntp
2023-06-02 21:06:00
amazon
amazon
Medium: ntp
2024-01-03 21:04:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-5.0-0040
2023-06-28 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0606
2023-07-02 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0417
2023-06-30 00:00:00
5.6 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.3%
Related for CVE-2023-26552