CVE-2015-5146: Debian Linux

Medium severity, CVSS 5.3. EPSS: 4.9% chance of exploitation in the next 30 days.

ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a computer entrusted to perform remote configuration to cause a denial of service (service crash) via a NULL byte in a crafted configuration directive packet.

Affected products

• Debian Debian Linux: version 7.0 only; version 8.0 only
• Fedoraproject Fedora: version 21 only; version 22 only; version 23 only
• Ntp Ntp: up to and including 4.2.8

Published 2017-08-24. Last modified 2026-06-17.