Vulnerability - CVE-2015-5300

›

›vulnerability›CVE-2015-5300

Name

CVE-2015-5300

Source

NVD ( link)Debian ( link)

Description

The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).

CWEs

Published Date

Jul 21, 2017

Updated Date

Jun 17, 2026

Workaround

-

Advisories

http://aix.software.ibm.com/aix/efixes/security/ntp_advisory5.ascThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170684.htmlThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.htmlThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.htmlThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1930.htmlThird Party Advisory

http://seclists.org/bugtraq/2016/Feb/164Mailing List

http://support.ntp.org/bin/view/Main/NtpBug2956Issue Tracking

http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p5_SecuritIssue Tracking

http://www.debian.org/security/2015/dsa-3388Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlThird Party Advisory

http://www.securityfocus.com/bid/77312VDB Entry

http://www.securitytracker.com/id/1034670VDB Entry

http://www.ubuntu.com/usn/USN-2783-1Third Party Advisory

https://bto.bluecoat.com/security-advisory/sa113Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1271076Issue Tracking

https://ics-cert.us-cert.gov/advisories/ICSA-15-356-01US Government Resource

https://support.citrix.com/article/CTX220112Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=isg3T1023885Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=isg3T1024073Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=nas8N1021264Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=ssg1S1005821Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=swg21979393Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=swg21980676Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=swg21983501Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=swg21983506Third Party Advisory

https://www.cs.bu.edu/~goldbe/NTPattack.htmlThird Party Advisory

https://www.freebsd.org/security/advisories/FreeBSD-SA-16:02.ntp.ascThird Party Advisory

https://www.ibm.com/support/home/docdisplay?lndocid=migr-5099428Third Party Advisory

https://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.htmlThird Party Advisory

https://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlThird Party Advisory

http://aix.software.ibm.com/aix/efixes/security/ntp_advisory5.ascThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170684.htmlThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.htmlThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177507.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00059.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00060.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00038.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.htmlThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.htmlThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1930.htmlThird Party Advisory

http://seclists.org/bugtraq/2016/Feb/164Mailing List

http://support.ntp.org/bin/view/Main/NtpBug2956Issue Tracking

http://support.ntp.org/bin/view/Main/SecurityNotice#January_2016_NTP_4_2_8p5_SecuritIssue Tracking

http://www.debian.org/security/2015/dsa-3388Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlThird Party Advisory

http://www.securityfocus.com/bid/77312VDB Entry

http://www.securitytracker.com/id/1034670VDB Entry

http://www.ubuntu.com/usn/USN-2783-1Third Party Advisory

https://bto.bluecoat.com/security-advisory/sa113Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1271076Issue Tracking

https://ics-cert.us-cert.gov/advisories/ICSA-15-356-01US Government Resource

https://support.citrix.com/article/CTX220112Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=isg3T1023885Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=isg3T1024073Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=nas8N1021264Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=ssg1S1005821Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=swg21979393Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=swg21980676Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=swg21983501Third Party Advisory

https://www-01.ibm.com/support/docview.wss?uid=swg21983506Third Party Advisory

https://www.cs.bu.edu/~goldbe/NTPattack.htmlThird Party Advisory

https://www.freebsd.org/security/advisories/FreeBSD-SA-16:02.ntp.ascThird Party Advisory

https://www.ibm.com/support/home/docdisplay?lndocid=migr-5099428Third Party Advisory

https://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.htmlThird Party Advisory

https://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlThird Party Advisory

Analysis#

Affected Component

Analysis

Vulnerability Ratings#

7.5

other

5

CVSSv2

Others affected components#

Name

Project

Project Version

Version

Status

buildroot

2025.02.x

4.2.8p18

Not Affected

buildroot

master

4.2.8p18

Not Affected

openwrt

master

4.2.8_p18-r3

Not Affected

openwrt

openwrt-25.12

4.2.8_p18-r3

Not Affected

yocto

kirkstone

4.2.8p15

Not Affected

yocto

master

4.2.8p18

Not Affected