Read the docs
TI-2017-04255 Aliases CVE-2017-6462GHSA-hghp-pw5c-9v93

Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in…

Priority LOW 35CWE-119Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 18 fixed, 1 without a fix

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-119 and the CVSS impact.

Summary

Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.

Why it matters now

EPSS 0.00491 42nd percentileScored 2026-11-07
Fix Partial Red Hat: 2 advisoriesRed Hat: 18 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 95

CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*4.2.8 p9VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:*4.3.0VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:*4.3.1VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:*4.3.2VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:*4.3.3VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:*4.3.4VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:*4.3.5VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:*4.3.6VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:*4.3.7VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:*4.3.8VulnerableNTP Project
  • cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:* Versions 4.2.8 p9 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.1:*:*:*:*:*:*:* Versions 4.3.1 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.2:*:*:*:*:*:*:* Versions 4.3.2 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.3:*:*:*:*:*:*:* Versions 4.3.3 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.4:*:*:*:*:*:*:* Versions 4.3.4 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.5:*:*:*:*:*:*:* Versions 4.3.5 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.6:*:*:*:*:*:*:* Versions 4.3.6 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.7:*:*:*:*:*:*:* Versions 4.3.7 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.8:*:*:*:*:*:*:* Versions 4.3.8 Vulnerable ·NTP Project
Show 85 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ntp:ntp:4.3.9:*:*:*:*:*:*:*4.3.9VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:*4.3.10VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:*4.3.11VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:*4.3.12VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:*4.3.13VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:*4.3.14VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:*4.3.15VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:*4.3.16VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:*4.3.17VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:*4.3.18VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:*4.3.19VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:*4.3.20VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:*4.3.21VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:*4.3.22VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:*4.3.23VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:*4.3.24VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:*4.3.25VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:*4.3.26VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:*4.3.27VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:*4.3.28VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:*4.3.29VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:*4.3.30VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:*4.3.31VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:*4.3.32VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:*4.3.33VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:*4.3.34VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:*4.3.35VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:*4.3.36VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:*4.3.37VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:*4.3.38VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:*4.3.39VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:*4.3.40VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:*4.3.41VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:*4.3.42VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:*4.3.43VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:*4.3.44VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:*4.3.45VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:*4.3.46VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:*4.3.47VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:*4.3.48VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:*4.3.49VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:*4.3.50VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:*4.3.51VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:*4.3.52VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:*4.3.53VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:*4.3.54VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:*4.3.55VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:*4.3.56VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:*4.3.57VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:*4.3.58VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:*4.3.59VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:*4.3.60VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:*4.3.61VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:*4.3.62VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:*4.3.63VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:*4.3.64VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:*4.3.65VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:*4.3.66VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:*4.3.67VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:*4.3.68VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:*4.3.69VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:*4.3.70VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:*4.3.71VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:*4.3.72VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:*4.3.73VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:*4.3.74VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:*4.3.75VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:*4.3.76VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:*4.3.77VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:*4.3.78VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:*4.3.79VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:*4.3.80VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:*4.3.81VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:*4.3.82VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:*4.3.83VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:*4.3.84VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:*4.3.85VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:*4.3.86VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:*4.3.87VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:*4.3.88VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:*4.3.89VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.90:*:*:*:*:*:*:*4.3.90VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.91:*:*:*:*:*:*:*4.3.91VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.92:*:*:*:*:*:*:*4.3.92VulnerableNTP Project
cpe:2.3:a:ntp:ntp:4.3.93:*:*:*:*:*:*:*4.3.93VulnerableNTP Project
  • cpe:2.3:a:ntp:ntp:4.3.9:*:*:*:*:*:*:* Versions 4.3.9 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.10:*:*:*:*:*:*:* Versions 4.3.10 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.11:*:*:*:*:*:*:* Versions 4.3.11 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.12:*:*:*:*:*:*:* Versions 4.3.12 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.13:*:*:*:*:*:*:* Versions 4.3.13 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.14:*:*:*:*:*:*:* Versions 4.3.14 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.15:*:*:*:*:*:*:* Versions 4.3.15 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.16:*:*:*:*:*:*:* Versions 4.3.16 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.17:*:*:*:*:*:*:* Versions 4.3.17 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.18:*:*:*:*:*:*:* Versions 4.3.18 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.19:*:*:*:*:*:*:* Versions 4.3.19 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.20:*:*:*:*:*:*:* Versions 4.3.20 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.21:*:*:*:*:*:*:* Versions 4.3.21 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.22:*:*:*:*:*:*:* Versions 4.3.22 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.23:*:*:*:*:*:*:* Versions 4.3.23 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.24:*:*:*:*:*:*:* Versions 4.3.24 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.25:*:*:*:*:*:*:* Versions 4.3.25 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.26:*:*:*:*:*:*:* Versions 4.3.26 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.27:*:*:*:*:*:*:* Versions 4.3.27 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.28:*:*:*:*:*:*:* Versions 4.3.28 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.29:*:*:*:*:*:*:* Versions 4.3.29 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.30:*:*:*:*:*:*:* Versions 4.3.30 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.31:*:*:*:*:*:*:* Versions 4.3.31 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.32:*:*:*:*:*:*:* Versions 4.3.32 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.33:*:*:*:*:*:*:* Versions 4.3.33 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.34:*:*:*:*:*:*:* Versions 4.3.34 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.35:*:*:*:*:*:*:* Versions 4.3.35 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.36:*:*:*:*:*:*:* Versions 4.3.36 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.37:*:*:*:*:*:*:* Versions 4.3.37 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.38:*:*:*:*:*:*:* Versions 4.3.38 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.39:*:*:*:*:*:*:* Versions 4.3.39 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.40:*:*:*:*:*:*:* Versions 4.3.40 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.41:*:*:*:*:*:*:* Versions 4.3.41 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.42:*:*:*:*:*:*:* Versions 4.3.42 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.43:*:*:*:*:*:*:* Versions 4.3.43 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.44:*:*:*:*:*:*:* Versions 4.3.44 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.45:*:*:*:*:*:*:* Versions 4.3.45 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.46:*:*:*:*:*:*:* Versions 4.3.46 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.47:*:*:*:*:*:*:* Versions 4.3.47 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.48:*:*:*:*:*:*:* Versions 4.3.48 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.49:*:*:*:*:*:*:* Versions 4.3.49 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.50:*:*:*:*:*:*:* Versions 4.3.50 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.51:*:*:*:*:*:*:* Versions 4.3.51 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.52:*:*:*:*:*:*:* Versions 4.3.52 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.53:*:*:*:*:*:*:* Versions 4.3.53 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.54:*:*:*:*:*:*:* Versions 4.3.54 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.55:*:*:*:*:*:*:* Versions 4.3.55 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.56:*:*:*:*:*:*:* Versions 4.3.56 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.57:*:*:*:*:*:*:* Versions 4.3.57 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.58:*:*:*:*:*:*:* Versions 4.3.58 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.59:*:*:*:*:*:*:* Versions 4.3.59 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.60:*:*:*:*:*:*:* Versions 4.3.60 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.61:*:*:*:*:*:*:* Versions 4.3.61 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.62:*:*:*:*:*:*:* Versions 4.3.62 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.63:*:*:*:*:*:*:* Versions 4.3.63 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.64:*:*:*:*:*:*:* Versions 4.3.64 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.65:*:*:*:*:*:*:* Versions 4.3.65 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.66:*:*:*:*:*:*:* Versions 4.3.66 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.67:*:*:*:*:*:*:* Versions 4.3.67 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.68:*:*:*:*:*:*:* Versions 4.3.68 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.69:*:*:*:*:*:*:* Versions 4.3.69 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.70:*:*:*:*:*:*:* Versions 4.3.70 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.71:*:*:*:*:*:*:* Versions 4.3.71 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.72:*:*:*:*:*:*:* Versions 4.3.72 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.73:*:*:*:*:*:*:* Versions 4.3.73 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.74:*:*:*:*:*:*:* Versions 4.3.74 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.75:*:*:*:*:*:*:* Versions 4.3.75 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.76:*:*:*:*:*:*:* Versions 4.3.76 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.77:*:*:*:*:*:*:* Versions 4.3.77 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.78:*:*:*:*:*:*:* Versions 4.3.78 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.79:*:*:*:*:*:*:* Versions 4.3.79 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.80:*:*:*:*:*:*:* Versions 4.3.80 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.81:*:*:*:*:*:*:* Versions 4.3.81 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.82:*:*:*:*:*:*:* Versions 4.3.82 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.83:*:*:*:*:*:*:* Versions 4.3.83 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.84:*:*:*:*:*:*:* Versions 4.3.84 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.85:*:*:*:*:*:*:* Versions 4.3.85 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.86:*:*:*:*:*:*:* Versions 4.3.86 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.87:*:*:*:*:*:*:* Versions 4.3.87 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.88:*:*:*:*:*:*:* Versions 4.3.88 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.89:*:*:*:*:*:*:* Versions 4.3.89 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.90:*:*:*:*:*:*:* Versions 4.3.90 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.91:*:*:*:*:*:*:* Versions 4.3.91 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.92:*:*:*:*:*:*:* Versions 4.3.92 Vulnerable ·NTP Project
  • cpe:2.3:a:ntp:ntp:4.3.93:*:*:*:*:*:*:* Versions 4.3.93 Vulnerable ·NTP Project

Remediation

Red Hat 2 advisories

  • RHSA-2018:0855 Released 2018-04-10 · Red Hat rating Moderate
    ntp security, bug fix, and enhancement update
    • Red Hat Enterprise Linux Client (v. 7) ntp-4.2.6p5-28.el7, ntpdate-4.2.6p5-28.el7
    • Red Hat Enterprise Linux Client Optional (v. 7) ntp-doc-4.2.6p5-28.el7, ntp-perl-4.2.6p5-28.el7, sntp-4.2.6p5-28.el7
    • Red Hat Enterprise Linux ComputeNode (v. 7) ntp-4.2.6p5-28.el7, ntpdate-4.2.6p5-28.el7
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) ntp-doc-4.2.6p5-28.el7, ntp-perl-4.2.6p5-28.el7, sntp-4.2.6p5-28.el7
    • Red Hat Enterprise Linux Server (v. 7) ntp-4.2.6p5-28.el7, ntpdate-4.2.6p5-28.el7
    • Red Hat Enterprise Linux Server Optional (v. 7) ntp-doc-4.2.6p5-28.el7, ntp-perl-4.2.6p5-28.el7, sntp-4.2.6p5-28.el7
    • Red Hat Enterprise Linux Workstation (v. 7) ntp-4.2.6p5-28.el7, ntpdate-4.2.6p5-28.el7
    • Red Hat Enterprise Linux Workstation Optional (v. 7) ntp-doc-4.2.6p5-28.el7, ntp-perl-4.2.6p5-28.el7, sntp-4.2.6p5-28.el7
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) ntp-4.2.6p5-28.el7, ntpdate-4.2.6p5-28.el7
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) ntp-doc-4.2.6p5-28.el7, ntp-perl-4.2.6p5-28.el7, sntp-4.2.6p5-28.el7
  • RHSA-2017:3071 Released 2017-10-26 · Red Hat rating Moderate
    ntp security update
    • Red Hat Enterprise Linux Desktop (v. 6) ntp-4.2.6p5-12.el6_9.1, ntpdate-4.2.6p5-12.el6_9.1
    • Red Hat Enterprise Linux Desktop Optional (v. 6) ntp-doc-4.2.6p5-12.el6_9.1, ntp-perl-4.2.6p5-12.el6_9.1
    • Red Hat Enterprise Linux HPC Node (v. 6) ntp-4.2.6p5-12.el6_9.1, ntpdate-4.2.6p5-12.el6_9.1
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) ntp-doc-4.2.6p5-12.el6_9.1, ntp-perl-4.2.6p5-12.el6_9.1
    • Red Hat Enterprise Linux Server (v. 6) ntp-4.2.6p5-12.el6_9.1, ntpdate-4.2.6p5-12.el6_9.1
    • Red Hat Enterprise Linux Server Optional (v. 6) ntp-doc-4.2.6p5-12.el6_9.1, ntp-perl-4.2.6p5-12.el6_9.1
    • Red Hat Enterprise Linux Workstation (v. 6) ntp-4.2.6p5-12.el6_9.1, ntpdate-4.2.6p5-12.el6_9.1
    • Red Hat Enterprise Linux Workstation Optional (v. 6) ntp-doc-4.2.6p5-12.el6_9.1, ntp-perl-4.2.6p5-12.el6_9.1

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2018:0855
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2018:0855
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2018:0855
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2018:0855
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2017:3071
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2017:3071
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2017:3071
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2017:3071
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2017:3071
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2018:0855
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2017:3071
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2018:0855
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2017:3071
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2018:0855
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2017:3071
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2018:0855
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2018:0855
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2018:0855

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-6462
  2. 2026-10-03 Alias added: GHSA-hghp-pw5c-9v93

References

Patch 1

Advisory 5

Other 2

  • TI-2015-06541 Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows… CVSS 3.1CRITICAL 9.8
  • TI-2014-07543 Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers… CVSS 2.0HIGH 7.5
  • TI-2013-04524 The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote… CVSS 2.0MEDIUM 5.0
  • TI-2016-06333 The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a… CVSS 3.1HIGH 7.5
  • TI-2018-08842 Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker… CVSS 3.0CRITICAL 9.8
  • TI-2016-04280 ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon… CVSS 3.1HIGH 7.5
See all 98 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences