CVE-2015-5300 The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to....
HighCVSS 7.5
EPSS 9.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ntp(Debian:11) | < 1:4.2.8p4+dfsg-2 | 1:4.2.8p4+dfsg-2 |
| fedoraproject fedora | = 21 | No fix listed |
| fedoraproject fedora | = 22 | No fix listed |
| SUSE linux enterprise debuginfo | = 11-sp2 | No fix listed |
| SUSE linux enterprise debuginfo | = 11-sp3 | No fix listed |
| SUSE linux enterprise debuginfo | = 11-sp4 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| SUSE linux enterprise desktop | = 12 | No fix listed |
| SUSE linux enterprise desktop | = 12-sp1 | No fix listed |
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp2 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 11-sp4 | No fix listed |
| SUSE linux enterprise server | = 12-sp1 | No fix listed |
| SUSE linux enterprise software development kit | = 12 | No fix listed |
| SUSE linux enterprise software development kit | = 12-sp1 | No fix listed |
| SUSE manager | = 2.1 | No fix listed |
| SUSE manager proxy | = 2.1 | No fix listed |
| SUSE openstack cloud | = 5 | No fix listed |
| suse linux enterprise server | = 12 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux hpc node | = 6.0 | No fix listed |
| redhat enterprise linux hpc node | = 7.0 | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise linux hpc node eus | = 7.1 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server eus | = 6.7.z | No fix listed |
| redhat enterprise linux server eus | = 7.1 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
| ntp | <= 4.2.8 | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- aix.software.ibm.com third-party-advisory
- FEDORA-2015-f5f5ec7b6b third-party-advisory vendor-advisory
- FEDORA-2015-77bfbc1bcd third-party-advisory vendor-advisory
- FEDORA-2016-34bc10a2c8 third-party-advisory vendor-advisory
- SUSE-SU:2016:1175 third-party-advisory vendor-advisory
- SUSE-SU:2016:1177 third-party-advisory vendor-advisory
- SUSE-SU:2016:1247 third-party-advisory vendor-advisory
- openSUSE-SU:2016:1292 third-party-advisory vendor-advisory
- SUSE-SU:2016:1311 third-party-advisory vendor-advisory
- SUSE-SU:2016:1912 third-party-advisory vendor-advisory
- SUSE-SU:2016:2094 third-party-advisory vendor-advisory
- openSUSE-SU:2016:1423 third-party-advisory vendor-advisory
- RHSA-2015:1930 third-party-advisory vendor-advisory
- [slackware-security] 20160223 ntp (SSA:2016-054-04) mailing-list third-party-advisory
- support.ntp.org issue-tracking patch vendor-advisory
- support.ntp.org issue-tracking patch vendor-advisory
- DSA-3388 third-party-advisory vendor-advisory
- www.oracle.com third-party-advisory
- 77312 third-party-advisory vdb-entry
- 1034670 third-party-advisory vdb-entry
- USN-2783-1 third-party-advisory vendor-advisory
- bto.bluecoat.com third-party-advisory
- bugzilla.redhat.com issue-tracking
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- security.netapp.com
- support.citrix.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www.cs.bu.edu third-party-advisory
- FreeBSD-SA-16:02 third-party-advisory vendor-advisory
- www.ibm.com third-party-advisory
- www.oracle.com third-party-advisory
- www.oracle.com third-party-advisory