CVE-2020-15025 REJECTED

ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.

EPSS 3.12% · 86.7th percentile

Risk Scores

EPSS Score
3.12%
86.7th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:20.04:LTSntp0, 1:4.2.8p12+dfsg-3ubuntu2, 1:4.2.8p12+dfsg-3ubuntu3

Timeline

References

Open in Interactive Console →