GCVE - cpe:2.3:a:ntp:ntp:4.2.8:p15:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ntp:ntp:4.2.8:p15:*:*:*:*:*:*

part: a version: 4.2.8 update: p15

Vendor	Ntp (`77708853-d84a-5559-8c08-a44d8f954172`)
Product	Ntp (`f62975db-b549-56ac-9df1-6f3f42fc2e08`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/ntp-project/ntp`	purl2cpe	2026-06-01 10:12:01.511373

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-26555`	vulnerable	2026-06-08 05:57:39.967967	Details available praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver. Published: 2023-04-11T00:00:00.000Z Updated: 2025-02-11T21:03:51.172Z Open on db.gcve.eu Reference links https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26555 https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506546409 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY2SVYH4MKPAXEYHCCXD3Z6VGINLSVHK/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3VHEHHWCTYSB7HVJLYPVK4RPJZ5LX52/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-26554`	vulnerable	2026-06-08 05:57:39.967358	Details available mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a client ntpq process, but cannot attack ntpd. Published: 2023-04-11T00:00:00.000Z Updated: 2025-02-11T15:26:14.067Z Open on db.gcve.eu Reference links https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26554 https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-26553`	vulnerable	2026-06-08 05:57:39.966948	Details available mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack ntpd. Published: 2023-04-11T00:00:00.000Z Updated: 2025-02-11T15:27:09.680Z Open on db.gcve.eu Reference links https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26553 https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-26552`	vulnerable	2026-06-08 05:57:39.966515	Details available mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd. Published: 2023-04-11T00:00:00.000Z Updated: 2025-02-11T15:30:15.235Z Open on db.gcve.eu Reference links https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26552 https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-26551`	vulnerable	2026-06-08 05:57:39.965958	Details available mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a client ntpq process, but cannot attack ntpd. Published: 2023-04-11T00:00:00.000Z Updated: 2025-02-11T15:32:41.155Z Open on db.gcve.eu Reference links https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26551 https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.