Skip to content
OpenAdvisories
Unscored USN-2783-1 18 CVEs

ntp vulnerabilities

Published Oct 27, 2015 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Aleksis Kauppinen discovered that NTP incorrectly handled certain remote
config packets. In a non-default configuration, a remote authenticated
attacker could possibly use this issue to cause NTP to crash, resulting in
a denial of service. (CVE-2015-5146)

Miroslav Lichvar discovered that NTP incorrectly handled logconfig
directives. In a non-default configuration, a remote authenticated attacker
could possibly use this issue to cause NTP to crash, resulting in a denial
of service. (CVE-2015-5194)

Miroslav Lichvar discovered that NTP incorrectly handled certain statistics
types. In a non-default configuration, a remote authenticated attacker
could possibly use this issue to cause NTP to crash, resulting in a denial
of service. (CVE-2015-5195)

Miroslav Lichvar discovered that NTP incorrectly handled certain file
paths. In a non-default configuration, a remote authenticated attacker
could possibly use this issue to cause NTP to crash, resulting in a denial
of service, or overwrite certain files. (CVE-2015-5196, CVE-2015-7703)

Miroslav Lichvar discovered that NTP incorrectly handled certain packets.
A remote attacker could possibly use this issue to cause NTP to hang,
resulting in a denial of service. (CVE-2015-5219)

Aanchal Malhotra, Isaac E. Cohen, and Sharon Goldberg discovered that NTP
incorrectly handled restarting after hitting a panic threshold. A remote
attacker could possibly use this issue to alter the system time on clients.
(CVE-2015-5300)

It was discovered that NTP incorrectly handled autokey data packets. A
remote attacker could possibly use this issue to cause NTP to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2015-7691, CVE-2015-7692, CVE-2015-7702)

It was discovered that NTP incorrectly handled memory when processing
certain autokey messages. A remote attacker could possibly use this issue
to cause NTP to consume memory, resulting in a denial of service.
(CVE-2015-7701)

Aanchal Malhotra, Isaac E. Cohen, and Sharon Goldberg discovered that NTP
incorrectly handled rate limiting. A remote attacker could possibly use
this issue to cause clients to stop updating their clock. (CVE-2015-7704,
CVE-2015-7705)

Yves Younan discovered that NTP incorrectly handled logfile and keyfile
directives. In a non-default configuration, a remote authenticated attacker
could possibly use this issue to cause NTP to enter a loop, resulting in a
denial of service. (CVE-2015-7850)

Yves Younan and Aleksander Nikolich discovered that NTP incorrectly handled
ascii conversion. A remote attacker could possibly use this issue to cause
NTP to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2015-7852)

Yves Younan discovered that NTP incorrectly handled reference clock memory.
A malicious refclock could possibly use this issue to cause NTP to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2015-7853)

John D "Doug" Birdwell discovered that NTP incorrectly handled decoding
certain bogus values. An attacker could possibly use this issue to cause
NTP to crash, resulting in a denial of service. (CVE-2015-7855)

Stephen Gray discovered that NTP incorrectly handled symmetric association
authentication. A remote attacker could use this issue to possibly bypass
authentication and alter the system clock. (CVE-2015-7871)

In the default installation, attackers would be isolated by the NTP
AppArmor profile.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS ntp 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5

Vulnerabilities 18

  • Unscored —
    CVE-2015-5146

    ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the co…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-5194

    The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denia…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-5195 Public exploit

    ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-5196 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7703. Reason: This candidate is a reservation duplicate of CVE-2…

    ntp Ubuntu
  • Unscored —
    CVE-2015-5219

    The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision valu…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-5300

    The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was great…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7691

    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7692

    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7701

    Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote att…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7702

    The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7703

    The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configu…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7704 EPSS 11%

    The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7705 EPSS 12%

    The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7850

    ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of servic…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7852 EPSS 12%

    ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7853 EPSS 12%

    The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attacke…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7855 Public exploit EPSS 31%

    The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7871 Public exploit EPSS 82%

    Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authe…

    ntp ntp Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2015-5146
  • report
    https://ubuntu.com/security/CVE-2015-5194
  • report
    https://ubuntu.com/security/CVE-2015-5195
  • report
    https://ubuntu.com/security/CVE-2015-5196
  • report
    https://ubuntu.com/security/CVE-2015-5219
  • report
    https://ubuntu.com/security/CVE-2015-5300
  • report
    https://ubuntu.com/security/CVE-2015-7691
  • report
    https://ubuntu.com/security/CVE-2015-7692
  • report
    https://ubuntu.com/security/CVE-2015-7701
  • report
    https://ubuntu.com/security/CVE-2015-7702
  • report
    https://ubuntu.com/security/CVE-2015-7703
  • report
    https://ubuntu.com/security/CVE-2015-7704
  • report
    https://ubuntu.com/security/CVE-2015-7705
  • report
    https://ubuntu.com/security/CVE-2015-7850
  • report
    https://ubuntu.com/security/CVE-2015-7852
  • report
    https://ubuntu.com/security/CVE-2015-7853
  • report
    https://ubuntu.com/security/CVE-2015-7855
  • report
    https://ubuntu.com/security/CVE-2015-7871