CVE-2023-26554
Fixed in a distro release EPSS <1%CVSS 5.6
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.
Products: ntp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | ntp | 4.2.8p15-3.amzn2.0.7 |
| Amazon Linux 2 | ntp-doc | 4.2.8p15-3.amzn2.0.7 |
| Amazon Linux 2 | ntp-perl | 4.2.8p15-3.amzn2.0.7 |
| Amazon Linux 2 | ntpdate | 4.2.8p15-3.amzn2.0.7 |
| Amazon Linux 2 | sntp | 4.2.8p15-3.amzn2.0.7 |
| Debian 11 | ntp | no fix |
| SUSE Linux Enterprise Module for Legacy 15 SP4 | ntp | 4.2.8p15-150000.4.22.1 |
| SUSE Linux Enterprise Server 12 SP5 | ntp | 4.2.8p15-100.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | ntp | 4.2.8p15-100.1 |
| Ubuntu 16.04 LTS | ntp | no fix |
| Ubuntu 22.04 LTS | ntp | no fix |
| Ubuntu Pro 14.04 LTS | ntp | no fix |
| Ubuntu Pro 18.04 LTS | ntp | no fix |
| Ubuntu Pro 20.04 LTS | ntp | no fix |
| openSUSE Leap 15.4 | ntp | 4.2.8p15-150000.4.22.1 |