Skip to content
OpenAdvisories
Unscored RHSA-2016:2583 15 CVEs

Red Hat Security Advisory: ntp security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client ntp 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::client ntp-debuginfo 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::client ntp-doc 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::client ntp-perl 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::client ntpdate 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::client sntp 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode ntp 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode ntp-debuginfo 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode ntp-doc 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode ntp-perl 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode ntpdate 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode sntp 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::server ntp 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::server ntp-debuginfo 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::server ntp-doc 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::server ntp-perl 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::server ntpdate 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::server sntp 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation ntp 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation ntp-debuginfo 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation ntp-doc 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation ntp-perl 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation ntpdate 0:4.2.6p5-25.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation sntp 0:4.2.6p5-25.el7

Vulnerabilities 15

  • Unscored —
    CVE-2015-5194

    The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denia…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-5195 Public exploit

    ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-5196 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7703. Reason: This candidate is a reservation duplicate of CVE-2…

    ntp Ubuntu
  • Unscored —
    CVE-2015-5219

    The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision valu…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7691

    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7692

    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7701

    Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote att…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7702

    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7703

    The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configu…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7852 EPSS 12%

    ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7974

    NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating pa…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7977

    ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer d…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7978

    NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) vi…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7979 EPSS 12%

    NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server associat…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-8158

    The getresponse function in ntpq in NTP versions before 4.2.8p9 and 4.3.x before 4.3.90 allows remote attackers to caus…

    ntp ntp Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1242553
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1254542
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1254544
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1254547
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1255118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1274254
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1274255
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1274261
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1297471
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1300269
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1300270
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1300271
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1300273
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2583.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5194
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5194
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5194
  • report
    https://access.redhat.com/security/cve/CVE-2015-5195
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5195
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5195
  • report
    https://access.redhat.com/security/cve/CVE-2015-5196
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5196
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5196
  • report
    https://access.redhat.com/security/cve/CVE-2015-5219
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5219
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5219
  • report
    https://access.redhat.com/security/cve/CVE-2015-7691
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-7691
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-7691
  • article
    http://support.ntp.org/bin/view/Main/SecurityNotice#October_2015_NTP_Security_Vulner
  • article
    https://github.com/ntp-project/ntp/blob/stable/NEWS#L11
  • report
    https://access.redhat.com/security/cve/CVE-2015-7692
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-7692
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-7692
  • report
    https://access.redhat.com/security/cve/CVE-2015-7701
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-7701
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-7701