#VU39360 Buffer overflow in ntp - CVE-2017-6459
Published: March 27, 2017 / Updated: August 8, 2020
Vulnerability identifier: #VU39360
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2017-6459
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerable software:
ntp
ntp
Software vendor:
ntp.org
ntp.org
Description
The vulnerability allows a local authenticated user to perform a denial of service (DoS) attack.
The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes.
Remediation
Install update from vendor's website.