HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2015-5219

CVSS 7.5v3.1pub. 2017-07-21upd. 2026-05-13

The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Canonical Ubuntu

    OS
    Canonical
    12.0414.0415.0415.10

  • Debian

    OS
    Debian
    7.08.0

  • Fedora Project Fedora

    OS
    Fedoraproject
    212223

  • Novell Leap

    OS
    Novell
    42.2

  • Ntp

    APP
    Ntp
    ≤ 4.2.7

  • Opensuse Leap

    OS
    Opensuse
    42.1

  • Oracle Linux

    OS
    Oracle
    6

  • Red Hat Enterprise Linux Desktop

    OS
    Redhat
    6.07.0

  • Red Hat Enterprise Linux Hpc Node

    OS
    Redhat
    6.07.0

  • Red Hat Enterprise Linux Server

    OS
    Redhat
    6.07.0

  • Red Hat Enterprise Linux Workstation

    OS
    Redhat
    6.07.0

  • Siemens Tim 4r Id Dnp3

    HW
    Siemens
    all versions

  • Siemens Tim 4r Id Dnp3 Firmware

    OS
    Siemens
    all versions

  • Siemens Tim 4r Ie

    HW
    Siemens
    all versions

  • Siemens Tim 4r Ie Firmware

    OS
    Siemens
    all versions

  • SUSE Linux Enterprise Debuginfo

    APP
    Suse
    11

  • SUSE Linux Enterprise Server

    OS
    Suse
    1011

  • SUSE Manager

    OS
    Suse
    2.1

  • SUSE Manager Proxy

    OS
    Suse
    2.1

  • SUSE Openstack Cloud

    OS
    Suse
    5
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2026-24061CRITICAL9.8⚠ KEVPL ✓same product

GNU Inetutils telnetd: ominięcie uwierzytelnienia przez zmienną USER

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2025-49113CRITICAL9.9⚠ KEVPL ✓same product

RCE przez deserializację PHP w Roundcube Webmail (parametr _from)

CVE-2025-32433CRITICAL10.0⚠ KEVPL ✓same product

Erlang/OTP SSH — nieuwierzytelniony RCE (CVSS 10.0)

CVE-2025-24201CRITICAL10.0⚠ KEVPL ✓same product

Apple WebKit: out-of-bounds write umożliwiający ucieczkę z sandbox przeglądarki