High severity7.5NVD Advisory· Published Jul 21, 2017· Updated Jun 17, 2026

CVE-2015-5219

Description

The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

NTP/NTP
cpe:2.3:a:ntp:ntp:*:p355:*:*:*:*:*:*
Range: <=4.2.7
SUSE S.A./Linux Enterprise Debuginfo2 versions
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp2:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp2:*:*:*:*:*:*
- cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*
Canonical/Ubuntu Linux4 versions
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Fedoraproject/Fedora3 versions
cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
Novell/Leap
cpe:2.3:o:novell:leap:42.2:*:*:*:*:*:*:*
OpenSUSE/Leap
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
Oracle Corporation/Linux
cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*
Red Hat/Enterprise Linux Desktop2 versions
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Hpc Node2 versions
cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server2 versions
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Workstation2 versions
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Siemens Foundation/Tim 4r ID Dnp3 Firmware
cpe:2.3:o:siemens:tim_4r-id_dnp3_firmware:*:*:*:*:*:*:*:*
Siemens Foundation/Tim 4r Ie Firmware
cpe:2.3:o:siemens:tim_4r-ie_firmware:*:*:*:*:*:*:*:*
SUSE S.A./Linux Enterprise Server3 versions
cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*+ 2 more
- cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*
SUSE S.A./Manager
cpe:2.3:o:suse:manager:2.1:*:*:*:*:*:*:*
SUSE S.A./Manager Proxy
cpe:2.3:o:suse:manager_proxy:2.1:*:*:*:*:*:*:*
SUSE S.A./Openstack Cloud
cpe:2.3:o:suse:openstack_cloud:5:*:*:*:*:*:*:*
SNTP/SNTPllm-create
Range: <4.2.7p366
osv-coords19 versions
pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/ntp&distro=SUSE%20Manager%202.1 pkg:rpm/suse/ntp&distro=SUSE%20Manager%20Proxy%202.1 pkg:rpm/suse/ntp&distro=SUSE%20OpenStack%20Cloud%205 pkg:rpm/suse/yast2-ntp-client&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS
< 4.2.8p9-55.1+ 18 more
- (no CPE)range: < 4.2.8p9-55.1
- (no CPE)range: < 4.2.8p9-55.1
- (no CPE)range: < 4.2.8p9-48.9.1
- (no CPE)range: < 4.2.8p6-41.1
- (no CPE)range: < 4.2.8p6-41.1
- (no CPE)range: < 4.2.8p6-41.1
- (no CPE)range: < 4.2.8p9-57.2
- (no CPE)range: < 4.2.8p9-55.1
- (no CPE)range: < 4.2.8p9-55.1
- (no CPE)range: < 4.2.8p9-46.18.1
- (no CPE)range: < 4.2.8p9-55.1
- (no CPE)range: < 4.2.8p9-57.2
- (no CPE)range: < 4.2.8p9-46.18.1
- (no CPE)range: < 4.2.8p9-55.1
- (no CPE)range: < 4.2.8p9-55.1
- (no CPE)range: < 4.2.8p6-41.1
- (no CPE)range: < 4.2.8p6-41.1
- (no CPE)range: < 4.2.8p6-41.1
- (no CPE)range: < 2.17.14.1-1.12.1

Patches

Vulnerability mechanics

References

bk1.ntp.org/ntp-dev/nvdIssue TrackingPatchThird Party Advisory
www.openwall.com/lists/oss-security/2015/08/25/3nvdMailing ListPatchThird Party Advisory
github.com/ntp-project/ntp/commit/5f295cd05c3c136d39f5b3e500a2d781bdbb59c8nvdIssue TrackingPatchThird Party Advisory
aix.software.ibm.com/aix/efixes/security/ntp_advisory4.ascnvdThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.htmlnvdMailing ListThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.htmlnvdMailing ListThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-September/166992.htmlnvdMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-0780.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-2583.htmlnvdThird Party Advisory
www.debian.org/security/2015/dsa-3388nvdThird Party Advisory
www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlnvdThird Party Advisory
www.securityfocus.com/bid/76473nvdThird Party AdvisoryVDB Entry
www.ubuntu.com/usn/USN-2783-1nvdThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-497656.pdfnvdThird Party Advisory
us-cert.cisa.gov/ics/advisories/icsa-21-103-11nvdThird Party AdvisoryUS Government Resource
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www.ibm.com/support/home/docdisplaynvdThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.htmlnvdBroken Link
lists.opensuse.org/opensuse-updates/2016-12/msg00153.htmlnvdBroken Link
bugzilla.redhat.com/show_bug.cginvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.005
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000