CVE-2017-6451

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-03-27 · updated 2026-06-17
Weakness: CWE-787

Description

The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.

Affected products

NTP: 4.2.8-p9, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4 (+89)

References

http://support.ntp.org/bin/view/Main/NtpBug3378
http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu
http://www.securityfocus.com/bid/97058
http://www.securitytracker.com/id/1038123
http://www.securitytracker.com/id/1039427
https://support.apple.com/HT208144
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us
http://support.ntp.org/bin/view/Main/NtpBug3378
http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu
http://www.securityfocus.com/bid/97058
http://www.securitytracker.com/id/1038123
http://www.securitytracker.com/id/1039427

Get alerted when CVE-2017-6451 or the next vulnerability affects your stack