CVE-2023-26555
Fixed in a distro release EPSS <1%CVSS 6.4
praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.
Products: ntp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | ntp | 4.2.8p15-3.amzn2.0.7 |
| Amazon Linux 2 | ntp-doc | 4.2.8p15-3.amzn2.0.7 |
| Amazon Linux 2 | ntp-perl | 4.2.8p15-3.amzn2.0.7 |
| Amazon Linux 2 | ntpdate | 4.2.8p15-3.amzn2.0.7 |
| Amazon Linux 2 | sntp | 4.2.8p15-3.amzn2.0.7 |
| Debian 11 | ntp | no fix |
| SUSE Linux Enterprise Module for Legacy 15 SP4 | ntp | 4.2.8p17-150000.4.25.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP5 | ntp | 4.2.8p17-150000.4.25.1 |
| SUSE Linux Enterprise Server 12 SP5 | ntp | 4.2.8p17-103.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | ntp | 4.2.8p17-103.1 |
| Ubuntu 16.04 LTS | ntp | no fix |
| Ubuntu 22.04 LTS | ntp | no fix |
| Ubuntu Pro 14.04 LTS | ntp | no fix |
| Ubuntu Pro 18.04 LTS | ntp | no fix |
| Ubuntu Pro 20.04 LTS | ntp | no fix |
| openSUSE Leap 15.4 | ntp | 4.2.8p17-150000.4.25.1 |
| openSUSE Leap 15.5 | ntp | 4.2.8p17-150000.4.25.1 |
| openSUSE Tumbleweed | ntp | 4.2.8p17-1.1 |