Skip to content
OpenAdvisories
Unscored RHSA-2016:0780 11 CVEs

Red Hat Security Advisory: ntp security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client ntp 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::client ntp-debuginfo 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::client ntp-doc 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::client ntp-perl 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::client ntpdate 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode ntp 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode ntp-debuginfo 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode ntp-doc 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode ntp-perl 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode ntpdate 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::server ntp 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::server ntp-debuginfo 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::server ntp-doc 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::server ntp-perl 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::server ntpdate 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation ntp 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation ntp-debuginfo 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation ntp-doc 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation ntp-perl 0:4.2.6p5-10.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation ntpdate 0:4.2.6p5-10.el6

Vulnerabilities 11

  • Unscored —
    CVE-2015-5194

    The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denia…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-5195 Public exploit

    ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-5219

    The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision valu…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7691

    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7692

    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7701

    Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote att…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7702

    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7703

    The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configu…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7852 EPSS 12%

    ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7977

    ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer d…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7978

    NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) vi…

    ntp ntp Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.8_Release_Notes/index.html
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.8_Technical_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1254542
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1254544
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1254547
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1255118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1274254
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1274255
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1274261
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1286969
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1300269
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1300270
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0780.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5194
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5194
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5194
  • report
    https://access.redhat.com/security/cve/CVE-2015-5195
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5195
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5195
  • report
    https://access.redhat.com/security/cve/CVE-2015-5219
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5219
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5219
  • report
    https://access.redhat.com/security/cve/CVE-2015-7691
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-7691
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-7691
  • article
    http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_Security_Vulner
  • article
    https://github.com/ntp-project/ntp/blob/stable/NEWS#L11
  • report
    https://access.redhat.com/security/cve/CVE-2015-7692
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-7692
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-7692
  • report
    https://access.redhat.com/security/cve/CVE-2015-7701
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-7701
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-7701
  • article
    https://github.com/ntp-project/ntp/blob/stable/NEWS#L91
  • report
    https://access.redhat.com/security/cve/CVE-2015-7702
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-7702
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-7702
  • report
    https://access.redhat.com/security/cve/CVE-2015-7703