CVE-2015-5300

Fixed in a distro release EPSS 9%

The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).

Published 2017-07-21 · CVE record · OSV

Products: fedoraproject fedora, suse linux_enterprise_debuginfo, opensuse leap, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, suse manager, suse manager_proxy, suse openstack_cloud, suse_linux_enterprise_server, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_hpc_node_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation, debian_linux, canonical ubuntu_linux, ntp

Distro releases