CVE-2017-6462
ntp: Buffer Overflow in DPTS Clock
Loading…
Severity
LowRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · March 21, 2017
Updated · May 13, 2026
Description
A vulnerability was found in NTP, in the parsing of packets from the /dev/datum device. A malicious device could send crafted messages, causing ntpd to crash.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Properly monitor your ntpd instances, and auto-restart ntpd (without -g) if it stops running.
CVSS / CWE
CVSS 3.0 · 6.4CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-131 · Incorrect Calculation of Buffer Size