Lucene search
Ubuntu.comUB:CVE-2023-26554HistoryApr 11, 2023 - 12:00 a.m.
CVE-2023-26554
2023-04-1100:00:00
ubuntu.com
ubuntu.com
17
cve-2023-26554; ntp; out-of-bounds write; mstolfp; libntp; ntpq cli issue; unix
5.6 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
0.001 Low
EPSS
Percentile
34.3%
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when
adding a ‘\0’ character. An adversary may be able to attack a client ntpq
process, but cannot attack ntpd.
Notes
| Author | Note |
|---|---|
| rodrigo-zaiden | ntpq CLI issue only. |
References
Related
cve
cve
CVE-2023-26554
2023-04-11 21:15:21
nvd
nvd
CVE-2023-26554
2023-04-11 21:15:21
redhatcve
redhatcve
CVE-2023-26554
2023-04-13 13:31:24
debiancve
debiancve
CVE-2023-26554
2023-04-11 21:15:21
prion
prion
Out-of-bounds
2023-04-11 21:15:00
cvelist
cvelist
CVE-2023-26554
2023-04-11 00:00:00
osv
osv
CVE-2023-26554
2023-04-11 21:15:21
ics
ics
Siemens SITOP UPS1600
2024-06-13 12:00:00
aix
aix
AIX is vulnerable to a denial of service due to NTP
2023-10-05 10:43:28
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2171-1)
2023-05-12 00:00:00
Slackware: Security Advisory (SSA:2023-153-02)
2023-06-05 00:00:00
Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2023-2700)
2023-09-05 00:00:00
nessus
nessus
SUSE SLES12 Security Update : ntp (SUSE-SU-2023:2171-1)
2023-05-14 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : ntp (SUSE-SU-2023:2142-1)
2023-05-13 00:00:00
EulerOS 2.0 SP11 : ntp (EulerOS-SA-2023-2658)
2024-01-16 00:00:00
ibm
ibm
amazon
amazon
Medium: ntp
2024-01-03 21:04:00
slackware
slackware
[slackware-security] ntp
2023-06-02 21:06:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-5.0-0040
2023-06-28 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0606
2023-07-02 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0417
2023-06-30 00:00:00
5.6 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
0.001 Low
EPSS
Percentile
34.3%
Related for UB:CVE-2023-26554