CVE-2017-6459

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-03-27 · updated 2026-06-17
Weakness: CWE-119

Description

The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes.

Affected products

NTP: 4.2.8-p9, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4 (+89)

References

http://support.ntp.org/bin/view/Main/NtpBug3382
http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu
http://www.securityfocus.com/bid/97076
http://www.securitytracker.com/id/1038123
https://support.apple.com/HT208144
http://support.ntp.org/bin/view/Main/NtpBug3382
http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu
http://www.securityfocus.com/bid/97076
http://www.securitytracker.com/id/1038123
https://support.apple.com/HT208144

Get alerted when CVE-2017-6459 or the next vulnerability affects your stack