CVE-2023-26551

Removed by vendor...

CVE-2023-26553

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack ntpd...

CVE-2023-26551

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cpcpdec while loop. An adversary may be able to attack a client ntpq process, but cannot attack ntpd...

CVE-2023-26551

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cpcpdec while loop. An adversary may be able to attack a client ntpq process, but cannot attack ntpd...

CVE-2023-26555

praecisparse in ntpd/refclockpalisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver...

CVE-2023-26552

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd...

CVE-2023-26553

CVE-2023-26553 corresponds to an out-of-bounds write in mstolfp.c of libntp (NTP 4.2.8p15). Affected software copies the trailing number in a faulty way, enabling an attacker to potentially compromise a client ntpq process; ntpd is not affected per the sources. Connected documents corroborate the...

CVE-2023-26552

CVE-2023-26552 affects NTP 4.2.8p15 where mstolfp.c can trigger an out-of-bounds write when adding a decimal point. The advisory notes that an attacker could potentially target a client ntpq process but cannot compromise ntpd. Several connected sources (IBM IBM i/security bulletins and Brocade/AS...

CVE-2023-26554

Removed by vendor...

CVE-2023-26555

Removed by vendor...

CVE-2023-26552

Removed by vendor...

CVE-2023-26555

The CVE-2023-26551 to CVE-2023-26555 family affects ntpd/libntp on NTP 4.2.8p15. Advisories (BSNSA23228/BSNSA23299/ALAS2-2024-2396) describe out-of-bounds write issues in mstolfp.c and palisade code paths, enabling potential exploitation against client ntpq processes (not ntpd in all cases), with...

CVE-2023-26554

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a client ntpq process, but cannot attack ntpd...

CVE-2023-26551

CVE-2023-26551 affects NTP 4.2.8p15, where mstolfp.c contains an out-of-bounds write in the cp

CVE-2023-26553

Removed by vendor...

Debian: Security Advisory (DLA-149-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-193-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-116-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-335-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-559-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...