CVE-2017-6462
Publication date 27 March 2017
Last updated 25 August 2025
Ubuntu priority
Cvss 3 Severity Score
Description
Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.
Status
Package | Ubuntu Release | Status |
---|---|---|
ntp | ||
18.04 LTS bionic |
Not affected
|
|
16.04 LTS xenial |
Fixed 1:4.2.8p4+dfsg-3ubuntu5.5
|
|
14.04 LTS trusty |
Fixed 1:4.2.6.p5+dfsg-3ubuntu2.14.04.11
|
|
Patch details
Package | Patch details |
---|---|
ntp |
Severity score breakdown
Parameter | Value |
---|---|
Base score |
|
Attack vector | Local |
Attack complexity | Low |
Privileges required | Low |
User interaction | None |
Scope | Unchanged |
Confidentiality | High |
Integrity impact | High |
Availability impact | High |
Vector | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
References
Related Ubuntu Security Notices (USN)
- USN-3707-2
- NTP vulnerabilities
- 23 January 2019
- USN-3349-1
- NTP vulnerabilities
- 5 July 2017