CVE-2017-6462 in ntp

Summary

Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 03/03/2017
• Disclosure: 03/27/2017
• Moderation: VulDB entry created
• Entries: VDB-98544 (1)
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 6.5
• EPSS: 0.00098
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-6462
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-6462
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-6462/