CVE-2015-5146: Input Validation
A flaw was found in the way ntpd processed certain remote configuration packets. An attacker could use a specially crafted package to cause ntpd to crash if:
ntpd enabled remote configuration The attacker had the knowledge of the configuration password The attacker had access to a computer entrusted to perform remote configuration
Note that remote configuration is disabled by default in NTP.
External References:
http://support.ntp.org/bin/view/Main/SecurityNotice#June2015NTPSecurityVulnerabi
Other sources
ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a computer entrusted to perform remote configuration to cause a denial of service (service crash) via a NULL byte in a crafted configuration directive packet.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5146?
CVE-2015-5146 has a high severity rating due to its potential to cause denial of service through crashes of the ntpd service.
How do I fix CVE-2015-5146?
To fix CVE-2015-5146, upgrade the ntp package to versions 4.2.8 or 4.3.25 or higher.
Which versions are affected by CVE-2015-5146?
CVE-2015-5146 affects ntp versions prior to 4.2.8 and 4.3.25.
Can CVE-2015-5146 be exploited remotely?
Yes, CVE-2015-5146 can be exploited remotely if ntpd is configured to accept remote configuration packets.
What conditions are necessary to exploit CVE-2015-5146?
Exploitation of CVE-2015-5146 requires knowledge of the configuration password and remote configuration enabled on ntpd.