CVE-2015-5195: Input Validation
It was found that ntpd exits with a segmentation fault when a statistics type that was not enabled during compilation (e.g. timingstats) is referenced by the statistics or filegen configuration command, for example:
ntpq -c ':config statistics timingstats' ntpq -c ':config filegen timingstats'
Upstream patch:
http://bk.ntp.org/ntp-dev/?PAGE=patch&REV=4d253ed0A400LyhRQIV0u23NJwuGAA
(in 4.2.6, the code than handles NULL == filegen needs to be adjusted as the outer loop was changed from while to for)
Other sources
ntpopenssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or filegen configuration command that is not enabled during compilation.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5195?
CVE-2015-5195 has been classified as a moderate severity vulnerability due to the potential for denial of service through segmentation faults.
How do I fix CVE-2015-5195?
To fix CVE-2015-5195, update your NTP software to a version that addresses this segmentation fault issue.
Which versions are affected by CVE-2015-5195?
CVE-2015-5195 affects several versions of NTP across Fedora, Red Hat Enterprise Linux, Debian, and Ubuntu distributions.
What causes the CVE-2015-5195 vulnerability?
The vulnerability is caused by NTP exiting with a segmentation fault when referencing a statistics type that was not enabled during compilation.
Is CVE-2015-5195 being actively exploited?
There is currently no evidence that CVE-2015-5195 is being actively exploited in the wild.