{"id":"CVE-2023-26555","aliases":["DEBIAN-CVE-2023-26555","EUVD-2023-30352","GHSA-3vvp-9ghf-fqvw","OESA-2023-1292","SUSE-SU-2023:2608-1","SUSE-SU-2023:2609-1","UBUNTU-CVE-2023-26555","openSUSE-SU-2024:12997-1"],"status":"published","title":"praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write.","description":"praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.","severity":{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00517,"percentile":0.44428,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2023-04-11T00:00:00Z","modified":"2026-08-27T23:04:53Z","fixes":[{"ecosystem":"openEuler:20.03-LTS-SP1","package":"ntp","fixed_in":["4.2.8p14-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"ntp","fixed_in":["4.2.8p14-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"ntp","fixed_in":["4.2.8p15-10.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"ntp","fixed_in":["4.2.8p15-10.oe2203sp1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP4","package":"ntp","fixed_in":["4.2.8p17-150000.4.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP5","package":"ntp","fixed_in":["4.2.8p17-150000.4.25.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"ntp","fixed_in":["4.2.8p17-150000.4.25.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"ntp","fixed_in":["4.2.8p17-150000.4.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ntp","fixed_in":["4.2.8p17-103.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ntp","fixed_in":["4.2.8p17-103.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ntp","fixed_in":["4.2.8p17-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:11","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.2.8p15+dfsg-1","1:4.2.8p15+dfsg-2-hurd.1","1:4.2.8p15+dfsg-2~1.2.1+dfsg1-7+hurd.1","1:4.2.8p15+dfsg-2~1.2.1+dfsg1-8+hurd.1","1:4.2.8p15+dfsg-2~1.2.2+dfsg1-2+hurd.1","1:4.2.8p15+dfsg-2~hurd.1"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p14-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p14-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-10.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p15-10.oe2203sp1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP4","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p17-150000.4.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP5","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p17-150000.4.25.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p17-150000.4.25.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p17-150000.4.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p17-103.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p17-103.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.2.6.p5+dfsg-3ubuntu2","1:4.2.6.p5+dfsg-3ubuntu2.14.04.1","1:4.2.6.p5+dfsg-3ubuntu2.14.04.2","1:4.2.6.p5+dfsg-3ubuntu2.14.04.3","1:4.2.6.p5+dfsg-3ubuntu2.14.04.5","1:4.2.6.p5+dfsg-3ubuntu2.14.04.6","1:4.2.6.p5+dfsg-3ubuntu2.14.04.7","1:4.2.6.p5+dfsg-3ubuntu2.14.04.8","1:4.2.6.p5+dfsg-3ubuntu2.14.04.10","1:4.2.6.p5+dfsg-3ubuntu2.14.04.11","1:4.2.6.p5+dfsg-3ubuntu2.14.04.12","1:4.2.6.p5+dfsg-3ubuntu2.14.04.13","1:4.2.6.p5+dfsg-3ubuntu2.14.04.13+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.2.6.p5+dfsg-3ubuntu8","1:4.2.6.p5+dfsg-3ubuntu8.1","1:4.2.6.p5+dfsg-3ubuntu9","1:4.2.8p4+dfsg-3ubuntu1","1:4.2.8p4+dfsg-3ubuntu2","1:4.2.8p4+dfsg-3ubuntu3","1:4.2.8p4+dfsg-3ubuntu4","1:4.2.8p4+dfsg-3ubuntu5","1:4.2.8p4+dfsg-3ubuntu5.1","1:4.2.8p4+dfsg-3ubuntu5.2","1:4.2.8p4+dfsg-3ubuntu5.3","1:4.2.8p4+dfsg-3ubuntu5.4","1:4.2.8p4+dfsg-3ubuntu5.5","1:4.2.8p4+dfsg-3ubuntu5.6","1:4.2.8p4+dfsg-3ubuntu5.7","1:4.2.8p4+dfsg-3ubuntu5.8","1:4.2.8p4+dfsg-3ubuntu5.9","1:4.2.8p4+dfsg-3ubuntu5.10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.2.8p10+dfsg-5ubuntu3","1:4.2.8p10+dfsg-5ubuntu4","1:4.2.8p10+dfsg-5ubuntu5","1:4.2.8p10+dfsg-5ubuntu6","1:4.2.8p10+dfsg-5ubuntu7","1:4.2.8p10+dfsg-5ubuntu7.1","1:4.2.8p10+dfsg-5ubuntu7.1+esm1","1:4.2.8p10+dfsg-5ubuntu7.1+esm2","1:4.2.8p10+dfsg-5ubuntu7.2","1:4.2.8p10+dfsg-5ubuntu7.2+esm1","1:4.2.8p10+dfsg-5ubuntu7.3","1:4.2.8p10+dfsg-5ubuntu7.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.2.8p12+dfsg-3ubuntu2","1:4.2.8p12+dfsg-3ubuntu3","1:4.2.8p12+dfsg-3ubuntu4","1:4.2.8p12+dfsg-3ubuntu4.20.04.1","1:4.2.8p12+dfsg-3ubuntu4.20.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.2.8p12+dfsg-3ubuntu6","1:4.2.8p15+dfsg-1ubuntu1","1:4.2.8p15+dfsg-1ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ntp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8p17-1.1"}]}]}],"products":[{"vendor":"ntp","product":"ntp"}],"references":[{"url":"https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26555","tags":["x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506546409","tags":["x_transferred","Issue Tracking","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY2SVYH4MKPAXEYHCCXD3Z6VGINLSVHK/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3VHEHHWCTYSB7HVJLYPVK4RPJZ5LX52/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26555","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY2SVYH4MKPAXEYHCCXD3Z6VGINLSVHK"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3VHEHHWCTYSB7HVJLYPVK4RPJZ5LX52"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IY2SVYH4MKPAXEYHCCXD3Z6VGINLSVHK"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y3VHEHHWCTYSB7HVJLYPVK4RPJZ5LX52"},{"url":"https://github.com/advisories/GHSA-3vvp-9ghf-fqvw"},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-26555","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1292","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232608-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1210390","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26555","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232609-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-26555","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26555","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-26555","description":"praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.","status":"published","published":"2023-04-11T00:00:00Z","modified":"2025-02-11T21:03:51.172Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:35:15.434947Z"}],"euvd":[{"id":"EUVD-2023-30352","description":"praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.","status":"published","published":"2023-04-11T00:00:00Z","modified":"2025-02-11T21:03:51Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:03:58.784175Z"}],"ghsa":[{"id":"GHSA-3vvp-9ghf-fqvw","title":"praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write.","description":"praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write.","status":"published","published":"2023-04-11T21:31:01Z","modified":"2024-04-11T21:02:46Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:57:05.919117Z"}],"nvd":[{"id":"CVE-2023-26555","description":"praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.","status":"published","published":"2023-04-11T21:15:21.83Z","modified":"2026-06-17T05:43:35.123Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:55.652109Z"}],"osv":[{"id":"CVE-2023-26555","description":"praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.","status":"published","published":"2023-04-11T21:15:21.83Z","modified":"2026-03-15T21:45:07.350856Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:31.135751Z"},{"id":"DEBIAN-CVE-2023-26555","description":"praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.","status":"published","published":"2023-04-11T21:15:21.83Z","modified":"2026-08-27T23:04:53.940163881Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"OESA-2023-1292","title":"ntp security update","description":"NTP is a protocol designed to synchronize the clocks of computers over a network, NTP version 4, a significant revision of the previous NTP standard, is the current development version. It is formalized by RFCs released by the IETF.\r\n\r\nSecurity Fix(es):\r\n\r\npraecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.(CVE-2023-26555)","status":"published","published":"2023-05-26T11:05:45Z","modified":"2026-08-18T01:17:40.276906081Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"UBUNTU-CVE-2023-26555","description":"praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.","status":"published","published":"2023-04-11T21:15:00Z","modified":"2025-10-24T05:01:51Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"},{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:20.198616Z"},{"id":"openSUSE-SU-2024:12997-1","title":"ntp-4.2.8p17-1.1 on GA media","description":"These are all security issues fixed in the ntp-4.2.8p17-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:16:10.594246Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:2608-1","title":"Security update for ntp","description":"This update for ntp fixes the following issues:\n\n- CVE-2023-26555: Fixed assertion failure on malformed RT-11 dates (bsc#1210390).\n","status":"published","published":"2023-06-22T07:53:01Z","modified":"2026-02-04T03:18:04.396246Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2609-1","title":"Security update for ntp","description":"This update for ntp fixes the following issues:\n\nntp was updated to 4.2.8p17:\n\n* Fix some regressions of 4.2.8p16\n\nUpdate to 4.2.8p16:\n\n* [Sec 3808] Assertion failure in ntpq on malformed RT-11 date\n* [Sec 3807], bsc#1210390, CVE-2023-26555:\n  praecis_parse() in the Palisade refclock driver has a\n  hypothetical input buffer overflow.\n* [Sec 3767] An OOB KoD RATE value triggers an assertion when\n  debug is enabled.\n* Multiple bug fixes and improvements. For details, see /usr/share/doc/packages/ntp/ChangeLog\n\n   http://www.ntp.org/support/securitynotice/4_2_8-series-changelog/\n\n- CVE-2023-26555: Fixed assertion failure on malformed RT-11 dates (bsc#1210390).\n","status":"published","published":"2023-06-22T07:53:19Z","modified":"2025-05-02T04:34:45.33396Z","updated_at":"2026-11-02T15:53:53.019382Z"}]}}