Lucene search
HistoryApr 11, 2023 - 9:15 p.m.
CVE-2023-26553
ntp
mstolfp.c
out-of-bounds
vulnerability
5.6 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.3%
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.
Affected configurations
Node
ntpntpMatch4.2.8p15
Related
redhatcve
redhatcve
CVE-2023-26553
2023-04-13 13:31:14
debiancve
debiancve
CVE-2023-26553
2023-04-11 21:15:21
cvelist
cvelist
CVE-2023-26553
2023-04-11 00:00:00
cve
cve
CVE-2023-26553
2023-04-11 21:15:21
ubuntucve
ubuntucve
CVE-2023-26553
2023-04-11 00:00:00
prion
prion
Out-of-bounds
2023-04-11 21:15:00
osv
osv
CVE-2023-26553
2023-04-11 21:15:21
ics
ics
Siemens SITOP UPS1600
2024-06-13 12:00:00
aix
aix
AIX is vulnerable to a denial of service due to NTP
2023-10-05 10:43:28
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2171-1)
2023-05-12 00:00:00
Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2023-2658)
2023-09-05 00:00:00
Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2023-2990)
2023-10-13 00:00:00
nessus
nessus
SUSE SLES12 Security Update : ntp (SUSE-SU-2023:2171-1)
2023-05-14 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : ntp (SUSE-SU-2023:2142-1)
2023-05-13 00:00:00
EulerOS 2.0 SP10 : ntp (EulerOS-SA-2023-2363)
2023-07-18 00:00:00
ibm
ibm
slackware
slackware
[slackware-security] ntp
2023-06-02 21:06:00
amazon
amazon
Medium: ntp
2024-01-03 21:04:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-5.0-0040
2023-06-28 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0606
2023-07-02 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0417
2023-06-30 00:00:00
5.6 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.3%
Related for NVD:CVE-2023-26553