CVE-2020-15025
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a...
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.
- Record
CVE-2020-15025- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:H/S:U/UI:N - Updated
- 2026-11-02
EUVDEUVD-2020-7153
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.
- Record
EUVD-2020-7153- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:H/S:U/UI:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p62f-hvr2-5w5f
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a...
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.
- Record
GHSA-p62f-hvr2-5w5f- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-401
- Updated
- 2026-11-02
NVD
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.
- Record
CVE-2020-15025- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H - CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-401
- Updated
- 2026-11-02
OSV
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.
- Record
CVE-2020-15025- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-15025
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.
- Record
DEBIAN-CVE-2020-15025- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 11 moreShow less
OSVOESA-2022-1952
ntp security update
NTP is a protocol designed to synchronize the clocks of computers over a network, NTP version 4, a significant revision of the previous NTP standard, is the current development version. It is formalized by RFCs released by the IETF.
Security Fix(es):
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.(CVE-2020-15025)
- Record
OESA-2022-1952- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2022-1953
ntp security update
NTP is a protocol designed to synchronize the clocks of computers over a network, NTP version 4, a significant revision of the previous NTP standard, is the current development version. It is formalized by RFCs released by the IETF.
Security Fix(es):
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.(CVE-2020-15025)
- Record
OESA-2022-1953- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-15025
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.
- Record
UBUNTU-CVE-2020-15025- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H - CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2020-0281 No score
Updated ntp packages fix security vulnerability
Updated ntp packages fix security vulnerability:
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file (CVE-2020-15025)
- Record
MGASA-2020-0281- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0934-1 No score
Security update for ntp
This update for ntp fixes the following issues:
ntp was updated to 4.2.8p15
- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740).
- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed mode 3 and mode 5 packets (bsc#1171355).
- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).
- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).
- Removed an OpenSSL version warning (bsc#992038 and bsc#1125401).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:0934-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1007-1 No score
Security update for ntp
This update for ntp fixes the following issues:
ntp was updated to 4.2.8p15
- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740).
- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed mode 3 and mode 5 packets (bsc#1171355).
- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).
- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).
- Removed an OpenSSL version warning (bsc#992038 and bsc#1125401).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:1007-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11102-1 No score
ntp-4.2.8p15-7.2 on GA media
These are all security issues fixed in the ntp-4.2.8p15-7.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11102-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:14415-1 No score
Security update for ntp
This update for ntp fixes the following issues:
ntp was updated to 4.2.8p15
- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740).
- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed mode 3 and mode 5 packets (bsc#1171355).
- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).
- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).
- Record
SUSE-SU-2020:14415-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:1805-1 No score
Security update for ntp
This update for ntp fixes the following issues:
ntp was updated to 4.2.8p15
- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740).
- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed mode 3 and mode 5 packets (bsc#1171355).
- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).
- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).
- Record
SUSE-SU-2020:1805-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:1823-1 No score
Security update for ntp
This update for ntp fixes the following issues:
ntp was updated to 4.2.8p15
- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740).
- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed mode 3 and mode 5 packets (bsc#1171355).
- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).
- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).
- Removed an OpenSSL version warning (bsc#992038 and bsc#1125401).
- Record
SUSE-SU-2020:1823-1- Updated
- 2026-11-02
OSVUSN-5175-1 No score
ntp vulnerability
It was discovered that ntpd incorrectly handled memory when CMAC keys were used. A remote attacker could possibly use this issue to cause ntpd to crash resulting in a denial of service.
- Record
USN-5175-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ntpDebian:11 |
before 1:4.2.8p15-1 | 1:4.2.8p15-1 |
ntpMageia:7 |
before 4.2.8p15-1.mga7 | 4.2.8p15-1.mga7 |
ntpopenEuler:20.03-LTS-SP1 |
before 4.2.8p14-5.oe1 | 4.2.8p14-5.oe1 |
ntpopenEuler:20.03-LTS-SP3 |
before 4.2.8p14-6.oe1 | 4.2.8p14-6.oe1 |
ntpSUSE:Linux Enterprise Server 11 SP4-LTSS |
before 4.2.8p15-64.16.1 | 4.2.8p15-64.16.1 |
ntpSUSE:HPE Helion OpenStack 8 |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:OpenStack Cloud 7 |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:OpenStack Cloud 8 |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:OpenStack Cloud Crowbar 8 |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ntpSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server 12 SP2-LTSS |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server 12 SP2-BCL |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server 12 SP3-BCL |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server 12 SP4 |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server 12 SP5 |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Enterprise Storage 5 |
before 4.2.8p15-88.1 | 4.2.8p15-88.1 |
ntpSUSE:Linux Enterprise Module for Legacy 15 SP1 |
before 4.2.8p15-4.10.1 | 4.2.8p15-4.10.1 |
ntpSUSE:Linux Enterprise Module for Legacy 15 SP2 |
before 4.2.8p15-4.10.1 | 4.2.8p15-4.10.1 |
ntpSUSE:Linux Enterprise Server 15-LTSS |
before 4.2.8p15-4.10.1 | 4.2.8p15-4.10.1 |
ntpSUSE:Linux Enterprise Server for SAP Applications 15 |
before 4.2.8p15-4.10.1 | 4.2.8p15-4.10.1 |
ntpUbuntu:Pro:20.04:LTS |
before 1:4.2.8p12+dfsg-3ubuntu4.20.04.1+esm1, plus listed versions 1:4.2.8p12+dfsg-3ubuntu21:4.2.8p12+dfsg-3ubuntu31:4.2.8p12+dfsg-3ubuntu41:4.2.8p12+dfsg-3ubuntu4.20.04.1 |
1:4.2.8p12+dfsg-3ubuntu4.20.04.1+esm1 |
ntpopenSUSE:Leap 15.1 |
before 4.2.8p15-lp151.2.3.1 | 4.2.8p15-lp151.2.3.1 |
ntpopenSUSE:Leap 15.2 |
before 4.2.8p15-lp152.3.3.1 | 4.2.8p15-lp152.3.3.1 |
ntpopenSUSE:Tumbleweed |
before 4.2.8p15-7.2 | 4.2.8p15-7.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-15025 is a medium vulnerability (CVSS 4.4) in Ntp, published June 24, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.14%, the 87th percentile. Fixed in ntp 1:4.2.8p15-1.
References
support.ntp.org/bin/view/Main/SecurityNotice
bugs.gentoo.org/729458
lists.opensuse.org/opensuse-security-announce/2020-07/msg00005.html
security.gentoo.org/glsa/202007-12
Show 42 moreShow less
oracle.com/security-alerts/cpujan2021.html
security.netapp.com/advisory/ntap-20200702-0002
nvd.nist.gov/vuln/detail/CVE-2020-15025
github.com/advisories/GHSA-p62f-hvr2-5w5f
security-tracker.debian.org/tracker/CVE-2020-15025
advisories.mageia.org/MGASA-2020-0281.html
bugs.mageia.org/show_bug.cgi?id=26851
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1952
suse.com/support/update/announcement/2020/suse-su-202014415-1
bugzilla.suse.com/1169740
ubuntu.com/security/CVE-2020-15025
bugs.ntp.org/show_bug.cgi?id=3661
cve.org/CVERecord?id=CVE-2020-15025