CVE catalog

CVE-2023-26551

ntp-4.2.8p15-13.1 on GA media

[CVE catalog]

Severity
Medium · CVSS 5.6CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.66% · Oct 27, 2026

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianntp111:4.2.8p15+dfsg-1vulnerable
Debianntp111:4.2.8p15+dfsg-2-hurd.1vulnerable
Debianntp111:4.2.8p15+dfsg-2~1.2.1+dfsg1-7+hurd.1vulnerable
Debianntp111:4.2.8p15+dfsg-2~1.2.1+dfsg1-8+hurd.1vulnerable
Debianntp111:4.2.8p15+dfsg-2~1.2.2+dfsg1-2+hurd.1vulnerable
Debianntp111:4.2.8p15+dfsg-2~hurd.1vulnerable
Susentplinux enterprise module for legacy 15 sp44.2.8p15-150000.4.22.1fixed
Opensusentpleap 15.44.2.8p15-150000.4.22.1fixed
Susentplinux enterprise server 12 sp54.2.8p15-100.1fixed
Susentplinux enterprise server for sap applications 12 sp54.2.8p15-100.1fixed
Ubuntuntppro1:4.2.8p12+dfsg-3ubuntu2vulnerable
Ubuntuntppro1:4.2.8p12+dfsg-3ubuntu3vulnerable
Ubuntuntppro1:4.2.8p12+dfsg-3ubuntu4vulnerable
Ubuntuntppro1:4.2.8p12+dfsg-3ubuntu4.20.04.1vulnerable
Ubuntuntppro1:4.2.8p12+dfsg-3ubuntu4.20.04.1+esm1vulnerable
Ubuntuntp16.041:4.2.6.p5+dfsg-3ubuntu8vulnerable
Ubuntuntp16.041:4.2.6.p5+dfsg-3ubuntu8.1vulnerable
Ubuntuntp16.041:4.2.6.p5+dfsg-3ubuntu9vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu1vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu2vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu3vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu4vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu5vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu5.1vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu5.2vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu5.3vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu5.4vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu5.5vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu5.6vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu5.7vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu5.8vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu5.9vulnerable
Ubuntuntp16.041:4.2.8p4+dfsg-3ubuntu5.10vulnerable
Ubuntuntp22.041:4.2.8p12+dfsg-3ubuntu6vulnerable
Ubuntuntp22.041:4.2.8p15+dfsg-1ubuntu1vulnerable
Ubuntuntp22.041:4.2.8p15+dfsg-1ubuntu2vulnerable
Opensusentptumbleweed4.2.8p15-13.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susentprpmlinux enterprise module for legacy 15 sp44.2.8p15-150000.4.22.1Not reportedSUSE-SU-2023:2142-1Not reported
Opensusentprpmleap 15.44.2.8p15-150000.4.22.1Not reportedSUSE-SU-2023:2142-1Not reported
Susentprpmlinux enterprise server 12 sp54.2.8p15-100.1Not reportedSUSE-SU-2023:2171-1Not reported
Susentprpmlinux enterprise server for sap applications 12 sp54.2.8p15-100.1Not reportedSUSE-SU-2023:2171-1Not reported
Opensusentprpmtumbleweed4.2.8p15-13.1Not reportedOPENSUSE-SU-2024:12913-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [ntp-dcf77-tools]Unknown

    Source package: [ntp]

    Details (1)

    • 4.2.8p18-3.3 · x86_64 · tumbleweed

      Unknown · Fixed: 4.2.8p15-13.1

      Version impact unknown

      pypi · ntp · opensuse · tumbleweed

  • [ntp-doc]Unknown

    Source package: [ntp]

    Details (1)

    • 4.2.8p18-3.3 · x86_64 · tumbleweed

      Unknown · Fixed: 4.2.8p15-13.1

      Version impact unknown

      pypi · ntp · opensuse · tumbleweed

  • [ntp]Fixed

    Source package: [ntp]

    Details (1)

    • 4.2.8p18-3.3 · x86_64 · tumbleweed

      Fixed · Fixed: 4.2.8p15-13.1

      pypi · ntp · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]