High severity8.8NVD Advisory· Published Mar 27, 2017· Updated Jun 17, 2026
CVE-2017-6458
CVE-2017-6458
Description
Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
39cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*+ 23 more
- cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*range: <4.2.8
- cpe:2.3:a:ntp:ntp:4.2.8:-:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1-beta1:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1-beta2:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1-beta3:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1-beta4:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1-beta5:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1-rc1:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p1-rc2:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p2:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p2-rc1:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p2-rc2:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p2-rc3:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p3:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p3-rc1:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p3-rc2:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p3-rc3:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p4:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p5:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p6:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p7:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p8:*:*:*:*:*:*
- cpe:2.3:a:ntp:ntp:4.2.8:p9:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_net_cp_443-1_opc_ua_firmware:*:*:*:*:*:*:*:*
- osv-coords12 versionspkg:rpm/opensuse/ntp&distro=openSUSE%20Tumbleweedpkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/ntp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2
< 4.2.8p15-7.2+ 11 more
- (no CPE)range: < 4.2.8p15-7.2
- (no CPE)range: < 4.2.8p10-60.1
- (no CPE)range: < 4.2.8p10-60.1
- (no CPE)range: < 4.2.8p10-63.1
- (no CPE)range: < 4.2.8p10-60.1
- (no CPE)range: < 4.2.8p10-60.1
- (no CPE)range: < 4.2.8p10-46.23.1
- (no CPE)range: < 4.2.8p10-60.1
- (no CPE)range: < 4.2.8p10-63.1
- (no CPE)range: < 4.2.8p10-46.23.1
- (no CPE)range: < 4.2.8p10-60.1
- (no CPE)range: < 4.2.8p10-60.1
Patches
Vulnerability mechanics
References
20- support.ntp.org/bin/view/Main/NtpBug3379nvdPatchVendor Advisory
- support.ntp.org/bin/view/Main/SecurityNoticenvdVendor Advisory
- www.securityfocus.com/bid/97051nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1038123nvdThird Party AdvisoryVDB Entry
- cert-portal.siemens.com/productcert/pdf/ssa-211752.pdfnvdThird Party Advisory
- support.apple.com/HT208144nvdThird Party Advisory
- support.hpe.com/hpsc/doc/public/displaynvdThird Party Advisory
- packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.htmlnvd
- seclists.org/fulldisclosure/2017/Nov/7nvd
- seclists.org/fulldisclosure/2017/Sep/62nvd
- www.securityfocus.com/archive/1/archive/1/540464/100/0/threadednvd
- www.ubuntu.com/usn/USN-3349-1nvd
- bto.bluecoat.com/security-advisory/sa147nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4B7BMVXV53EE7XYW2KAVETDHTP452O3Z/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KVLFA3J43QFIP4I7HE7KQ5FXSMJEKC6/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZUPPICJXWL3AWQB7I3AWUC74YON7UING/nvd
- support.apple.com/kb/HT208144nvd
- support.f5.com/csp/article/K99254031nvd
- us-cert.cisa.gov/ics/advisories/icsa-21-159-11nvd
- www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-294/nvd
News mentions
0No linked articles in our index yet.