CVE-2017-6451
HighSummary
The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, allowing local users to execute arbitrary code via unspecified vectors, leading to an out-of-bounds memory write.
Risk Assessment
This vulnerability poses a risk to local users who may exploit it to execute malicious code, potentially compromising the system.
Recommendation
It is recommended to update NTP to version 4.2.8p10 or 4.3.94 to mitigate this vulnerability and to monitor systems for potential exploitation attempts.
Other vulnerabilities in NTP (Network Time Protocol)
See all- CVE-2015-7854High
Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.
- CVE-2015-7849High
Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.
- CVE-2015-7701High
A memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before version 4.2.8p4 and 4.3.x before version 4.3.77 allows remote attackers to cause a denial of service through excessive memory consumption.
- CVE-2015-7692High
The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash).
- CVE-2015-5195High
The ntp_openssl.m4 in ntpd in NTP before version 4.2.7p112 has a vulnerability that allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or filegen configuration command that is not enabled during compilation.
- CVE-2017-6462High
Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before version 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.
- CVE-2017-6460High
A stack-based buffer overflow in the reslist function in ntpq in NTP before version 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers to have unspecified impact via a long flagstr variable in a restriction list response.
- CVE-2017-6458High
Multiple buffer overflows in the ctl_put* functions in NTP before version 4.2.8p10 and 4.3.x before version 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.
- CVE-2017-6452High
There is a stack-based buffer overflow in the Windows installer for NTP before version 4.2.8p10 and 4.3.x before version 4.3.94. This allows local users to have unspecified impact via an application path on the command line.
- CVE-2015-7979High
NTP versions before 4.2.8p6 and 4.3.x before 4.3.90 are vulnerable to an attack that can lead to denial of service by tearing down client-server associations. Attackers can achieve this by sending broadcast packets with invalid authentication to a broadcast client.
Original NVD description (English source)
The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.