CVE-2015-5219

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.7p366

Description The issue allows remote attackers to cause a denial of service, potentially via a crafted NTP packet. This is due to improper type conversions from a precision value to a double in the ULOGTOD function in ntp.d in SNTP. Additionally, the decodenetnum() function may cause a denial of service when encountering invalid values instead of returning FAIL.

Recommendations For versions prior to 4.2.7p366, update to version 4.2.7p366 or later to resolve the issue. As a temporary workaround, consider restricting access to the NTP service to minimize the risk of exploitation.