Description
ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or filegen configuration command that is not enabled during compilation.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 11 | ntp | 1:4.2.8p3+dfsg-1 | — |
| Debian 8 | ntp | 1:4.2.6.p5+dfsg-7+deb8u1 | DSA-3388-1 |
| Debian 7 | ntp | 1:4.2.6.p5+dfsg-2+deb7u6 | DSA-3388-1 |
| Debian 6.0 | ntp | 1:4.2.6.p2+dfsg-1+deb6u4 | DLA-335-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | ntp | 1:4.2.6.p5+dfsg-3ubuntu2.14.04.5 | USN-2783-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | ntp +4 | 4.2.6p5-25.el7 | RHSA-2016:2583 |
| RHEL 6 | ntp +3 | 4.2.6p5-10.el6 | RHSA-2016:0780 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | ntp +4 | 4.2.6p5-25.0.1.el7 | ELSA-2016-2583 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
theglife214/CVE-2015-5195 ★ 0 · Mar 4, 2017
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 6
- RHSA-2016:2583 Red Hat Security Advisory: ntp security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2016:0780 Red Hat Security Advisory: ntp security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DLA-335-1 ntp - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3388-1 ntp - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-2783-1 ntp vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- ELSA-2016-2583 Moderate: ntp security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 9, 2016
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1254544
- https://www-01.ibm.com/support/docview.wss?uid=isg3T1024157
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- https://github.com/ntp-project/ntp/commit/52e977d79a0c4ace997e5c74af429844da2f27be
- USN-2783-1 vendor-advisory
- https://www-01.ibm.com/support/docview.wss?uid=swg21986956
- https://www-01.ibm.com/support/docview.wss?uid=swg21988706
- RHSA-2016:2583 vendor-advisory
- FEDORA-2015-77bfbc1bcd vendor-advisory
- RHSA-2016:0780 vendor-advisory
- DSA-3388 vendor-advisory
- [oss-security] 20150825 Several low impact ntp.org ntpd issues mailing-list
- 76474 vdb-entry
- FEDORA-2015-14212 vendor-advisory
- https://www-01.ibm.com/support/docview.wss?uid=swg21989542
- https://www-01.ibm.com/support/docview.wss?uid=swg21985122
- FEDORA-2015-14213 vendor-advisory