CVE-2017-6463
ntp: Authenticated DoS via Malicious Config Option
Loading…
Severity
ModerateRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · March 21, 2017
Updated · May 13, 2026
Description
A vulnerability was discovered in the NTP server's parsing of configuration directives. A remote, authenticated attacker could cause ntpd to crash by sending a crafted message.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Properly monitor your ntpd instances, and auto-restart ntpd (without -g) if it stops running.
CVSS / CWE
CVSS 3.0 · 6.5CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference