{"id":"CVE-2015-5196","aliases":["EUVD-2015-5197","MGASA-2015-0348","RHSA-2016:2583","UBUNTU-CVE-2015-5196","USN-2783-1"],"status":"rejected","title":"Updated ntp packages fix security vulnerabilities","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7703. Reason: This candidate is a reservation duplicate of CVE-2015-7703. Notes: All CVE users should reference CVE-2015-7703 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2015-08-25T00:00:00Z","modified":"2026-06-26T12:21:52Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"ntp","fixed_in":["1:4.2.6.p5+dfsg-3ubuntu2.14.04.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:4","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6p5-15.6.mga4"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:5","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.6p5-24.1.mga5"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ntpdate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.6p5-25.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.6.p5+dfsg-3ubuntu2.14.04.5"}]}],"versions":["1:4.2.6.p5+dfsg-3ubuntu2","1:4.2.6.p5+dfsg-3ubuntu2.14.04.1","1:4.2.6.p5+dfsg-3ubuntu2.14.04.2","1:4.2.6.p5+dfsg-3ubuntu2.14.04.3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.6.p5+dfsg-3ubuntu2.14.04.5"}]}],"versions":["1:4.2.6.p5+dfsg-3ubuntu2","1:4.2.6.p5+dfsg-3ubuntu2.14.04.1","1:4.2.6.p5+dfsg-3ubuntu2.14.04.2","1:4.2.6.p5+dfsg-3ubuntu2.14.04.3"],"bundled":18}],"references":[{"url":"https://www.suse.com/security/cve/CVE-2015-5196.html"},{"url":"https://access.redhat.com/errata/RHSA-2016:2583","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-5196","tags":["report"]},{"url":"https://advisories.mageia.org/CVE-2015-5196.html"},{"url":"https://linux.oracle.com/cve/CVE-2015-5196.html"},{"url":"https://advisories.mageia.org/MGASA-2015-0348.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16322","tags":["report"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#June_2015_NTP_Security_Vulnerabi","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2015/08/25/3","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1242553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1254542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1254544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1254547","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1255118","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1274254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1274255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1274261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300273","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2583.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5194","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5194","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5194","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5195","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5195","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5195","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5196","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5196","tags":["advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5196","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5219","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5219","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5219","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7691","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7691","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7691","tags":["advisory"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_Security_Vulner","tags":["article"]},{"url":"https://github.com/ntp-project/ntp/blob/stable/NEWS#L11","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7692","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7692","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7692","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7701","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7701","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7701","tags":["advisory"]},{"url":"https://github.com/ntp-project/ntp/blob/stable/NEWS#L91","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7702","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7702","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7702","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7703","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7703","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7703","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7852","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7852","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7852","tags":["advisory"]},{"url":"http://support.ntp.org/bin/view/Main/NtpBug2919","tags":["article"]},{"url":"http://talosintel.com/reports/TALOS-2015-0063/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7974","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7974","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7974","tags":["advisory"]},{"url":"http://support.ntp.org/bin/view/Main/NtpBug2936","tags":["article"]},{"url":"http://www.talosintel.com/reports/TALOS-2016-0071/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7977","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7977","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7977","tags":["advisory"]},{"url":"http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p6_Securit","tags":["article"]},{"url":"http://www.talosintel.com/reports/TALOS-2016-0074/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7978","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7978","tags":["advisory"]},{"url":"http://www.talosintel.com/reports/TALOS-2016-0075/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7979","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7979","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7979","tags":["advisory"]},{"url":"http://www.talosintel.com/reports/TALOS-2016-0076/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8158","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8158","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8158","tags":["advisory"]},{"url":"http://www.talosintel.com/reports/TALOS-2016-0080/","tags":["article"]},{"url":"http://www.openwall.com/lists/oss-security/2015/08/25/3","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2783-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-5146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-5194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-5195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-5219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-5300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7691","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7692","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7701","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7702","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7703","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7704","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7850","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7852","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7853","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7855","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7871","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-5196","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7703. Reason: This candidate is a reservation duplicate of CVE-2015-7703. Notes: All CVE users should reference CVE-2015-7703 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.","status":"rejected","modified":"2023-02-12T00:00:00Z","updated_at":"2026-11-02T14:35:39.846011Z"}],"euvd":[{"id":"EUVD-2015-5197","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7703. Reason: This candidate is a reservation duplicate of CVE-2015-7703. Notes: All CVE users should reference CVE-2015-7703 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.","status":"published","modified":"2023-02-12T00:00:00Z","updated_at":"2026-11-03T03:51:01.523493Z"}],"nvd":[{"id":"CVE-2015-5196","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7703. Reason: This candidate is a reservation duplicate of CVE-2015-7703. Notes: All CVE users should reference CVE-2015-7703 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.","status":"rejected","published":"2015-10-23T16:59:00.103Z","modified":"2023-11-07T02:26:04.26Z","updated_at":"2026-11-02T14:03:12.30866Z"}],"osv":[{"id":"MGASA-2015-0348","title":"Updated ntp packages fix security vulnerabilities","description":"Updated ntp packages fix security vulnerability:\n\nA flaw was found in the way ntpd processed certain remote configuration\npackets. An attacker could use a specially crafted package to cause ntpd to\ncrash if the attacker had authenticated access to remote ntpd configuration\n(CVE-2015-5146).\n\nIt was found that ntpd could crash due to an uninitialized variable when\nprocessing malformed logconfig configuration commands, for example,\nntpq -c \":config logconfig a\" (CVE-2015-5194).\n\nIt was found that ntpd exits with a segmentation fault when a statistics\ntype that was not enabled during compilation (e.g. timingstats) is\nreferenced by the statistics or filegen configuration command, for example,\nntpq -c ':config statistics timingstats'\nntpq -c ':config filegen timingstats' (CVE-2015-5195).\n\nIt was found that the :config command can be used to set the pidfile and\ndriftfile paths without any restrictions. A remote attacker could use\nthis flaw to overwrite a file on the file system with a file containing\nthe pid of the ntpd process (immediately) or the current estimated drift\nof the system clock (in hourly intervals). For example,\nntpq -c ':config pidfile /tmp/ntp.pid'\nntpq -c ':config driftfile /tmp/ntp.drift' (CVE-2015-5196).\n\nIt was discovered that sntp would hang in an infinite loop when a\ncrafted NTP packet was received, related to the conversion of the\nprecision value in the packet to double (CVE-2015-5219).\n","status":"published","published":"2015-09-08T17:55:59Z","modified":"2026-04-16T06:23:59.384781567Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"RHSA-2016:2583","title":"Red Hat Security Advisory: ntp security and bug fix update","status":"published","published":"2024-09-15T23:17:57Z","modified":"2026-06-26T12:21:52.461962277Z","updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"UBUNTU-CVE-2015-5196","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7703. Reason: This candidate is a reservation duplicate of CVE-2015-7703. Notes: All CVE users should reference CVE-2015-7703 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.","status":"published","published":"2015-08-25T00:00:00Z","modified":"2026-02-04T03:25:59.815361Z","updated_at":"2026-11-02T15:54:10.385269Z"},{"id":"USN-2783-1","title":"ntp vulnerabilities","description":"Aleksis Kauppinen discovered that NTP incorrectly handled certain remote\nconfig packets. In a non-default configuration, a remote authenticated\nattacker could possibly use this issue to cause NTP to crash, resulting in\na denial of service. (CVE-2015-5146)\n\nMiroslav Lichvar discovered that NTP incorrectly handled logconfig\ndirectives. In a non-default configuration, a remote authenticated attacker\ncould possibly use this issue to cause NTP to crash, resulting in a denial\nof service. (CVE-2015-5194)\n\nMiroslav Lichvar discovered that NTP incorrectly handled certain statistics\ntypes. In a non-default configuration, a remote authenticated attacker\ncould possibly use this issue to cause NTP to crash, resulting in a denial\nof service. (CVE-2015-5195)\n\nMiroslav Lichvar discovered that NTP incorrectly handled certain file\npaths. In a non-default configuration, a remote authenticated attacker\ncould possibly use this issue to cause NTP to crash, resulting in a denial\nof service, or overwrite certain files. (CVE-2015-5196, CVE-2015-7703)\n\nMiroslav Lichvar discovered that NTP incorrectly handled certain packets.\nA remote attacker could possibly use this issue to cause NTP to hang,\nresulting in a denial of service. (CVE-2015-5219)\n\nAanchal Malhotra, Isaac E. Cohen, and Sharon Goldberg discovered that NTP\nincorrectly handled restarting after hitting a panic threshold. A remote\nattacker could possibly use this issue to alter the system time on clients.\n(CVE-2015-5300)\n\nIt was discovered that NTP incorrectly handled autokey data packets. A\nremote attacker could possibly use this issue to cause NTP to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2015-7691, CVE-2015-7692, CVE-2015-7702)\n\nIt was discovered that NTP incorrectly handled memory when processing\ncertain autokey messages. A remote attacker could possibly use this issue\nto cause NTP to consume memory, resulting in a denial of service.\n(CVE-2015-7701)\n\nAanchal Malhotra, Isaac E. Cohen, and Sharon Goldberg discovered that NTP\nincorrectly handled rate limiting. A remote attacker could possibly use\nthis issue to cause clients to stop updating their clock. (CVE-2015-7704,\nCVE-2015-7705)\n\nYves Younan discovered that NTP incorrectly handled logfile and keyfile\ndirectives. In a non-default configuration, a remote authenticated attacker\ncould possibly use this issue to cause NTP to enter a loop, resulting in a\ndenial of service. (CVE-2015-7850)\n\nYves Younan and Aleksander Nikolich discovered that NTP incorrectly handled\nascii conversion. A remote attacker could possibly use this issue to cause\nNTP to crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2015-7852)\n\nYves Younan discovered that NTP incorrectly handled reference clock memory.\nA malicious refclock could possibly use this issue to cause NTP to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2015-7853)\n\nJohn D \"Doug\" Birdwell discovered that NTP incorrectly handled decoding\ncertain bogus values. An attacker could possibly use this issue to cause\nNTP to crash, resulting in a denial of service. (CVE-2015-7855)\n\nStephen Gray discovered that NTP incorrectly handled symmetric association\nauthentication. A remote attacker could use this issue to possibly bypass\nauthentication and alter the system clock. (CVE-2015-7871)\n\nIn the default installation, attackers would be isolated by the NTP\nAppArmor profile.\n","status":"published","published":"2015-10-27T17:02:35Z","modified":"2026-02-10T04:40:56Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}